vulnerability

F5 Networks: K35135935 (CVE-2018-9056): Side-channel processor vulnerability CVE-2018-9056 (BranchScope)

Severity
5
CVSS
(AV:L/AC:M/Au:N/C:C/I:N/A:N)
Published
Mar 27, 2018
Added
May 6, 2018
Modified
Aug 25, 2020

Description

Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table (PHT), aka BranchScope.

Solution

f5-big-ip-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.