← Vulnerability feed

Vulnerability record · CVE-2018-3620 · published 14 August 2018

CVE-2018-3620: Intel core i3 observable discrepancy vulnerability

Intel · Core I3

Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis.

5.6 CVSS 3.1 Medium EPSS 5.6% · top 7.4% CWE-203 · Observable discrepancy
5.6CVSS 3.1 base score, v2 4.7
5.6%EPSS exploitation probability, 30 days
NoNot in CISA KEV
8Affected product versions listed by NVD
106References
17 Jun 2026Last modified by NVD

Description

Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis.

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Affected products

8 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://support.lenovo.com/us/en/solutions/LEN-24163 Third Party Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en Third Party Advisory
http://www.securityfocus.com/bid/105080 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041451 Third Party AdvisoryVDB Entry
http://www.vmware.com/security/advisories/VMSA-2018-0021.html Third Party Advisory
http://xenbits.xen.org/xsa/advisory-273.html Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2384 Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2387 Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2388 Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2389 Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2390 Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2391 Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2392 Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2393 Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2394 Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2395 Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2396 Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2402 Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2403 Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2404 Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2602
https://access.redhat.com/errata/RHSA-2018:2603
https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf
https://foreshadowattack.eu/ Technical DescriptionThird Party Advisory
https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
https://lists.debian.org/debian-lts-announce/2018/08/msg00029.html
https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V4UWGORQWCENCIF2BHWUEF2
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XRFKQWYV2H4BV75CUNGCGE5
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180018
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0009 Third Party Advisory
https://security.FreeBSD.org/advisories/FreeBSD-SA-18:09.l1tf.asc Third Party Advisory
https://security.gentoo.org/glsa/201810-06
https://security.netapp.com/advisory/ntap-20180815-0001/ Third Party Advisory
https://software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault MitigationVendor Advisory
https://support.f5.com/csp/article/K95275140 Third Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03874en_us Third Party Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180814-cpusidechannel Third Party Advisory
https://usn.ubuntu.com/3740-1/ Third Party Advisory

Track CVE-2018-3620 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.6CVE-2018-12169Intel core i3 improper authentication vulnerabilityPlatform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th G…EPSS 0.55%7.3CVE-2018-3615Intel core i3 observable discrepancy vulnerabilitySystems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of inf…EPSS 6.3%6.7CVE-2021-0114Intel atom c3000 insecure default initialization vulnerabilityUnchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via …EPSS 0.27%6.7CVE-2021-0144Intel atom c3000 insecure default initialization vulnerabilityInsecure default variable initialization for the Intel BSSA DFT feature may allow a privileged user to potentially enable an escalation of privilege …EPSS 0.33%6.7CVE-2017-5704Intel core i3 insufficiently protected credentials vulnerabilityPlatform sample code firmware included with 4th Gen Intel Core Processor, 5th Gen Intel Core Processor, 6th Gen Intel Core Processor, and 7th Gen Int…EPSS 0.29%5.6CVE-2018-3646Intel core i3 information exposure vulnerabilitySystems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in th…EPSS 8.6%5.6CVE-2018-3693Intel atom c vulnerabilitySystems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker wi…EPSS 8.6%5.6CVE-2018-3665Intel core i3 information exposure vulnerabilitySystem software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to …EPSS 0.63%

Source: NIST National Vulnerability Database (record CVE-2018-3620), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.