CVEvulnerability

CVE-2017-5754

5.6 MEDIUM Published 2018-01-04 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-01-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
5.6 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS 3.0 ([email protected])
5.6 MEDIUM — CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.7 MEDIUM — AV:L/AC:M/Au:N/C:C/I:N/A:N
Weaknesses
CWE-200

Description

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.

Affected configurations

• intel atom c c2308 • intel atom c c2316 • intel atom c c2338 • intel atom c c2350 • intel atom c c2358 • intel atom c c2508 • intel atom c c2516 • intel atom c c2518 • intel atom c c2530 • intel atom c c2538 • intel atom c c2550 • intel atom c c2558 • intel atom c c2718 • intel atom c c2730 • intel atom c c2738 • intel atom c c2750 • intel atom c c2758 • intel atom c c3308 • intel atom c c3338 • intel atom c c3508 • intel atom c c3538 • intel atom c c3558 • intel atom c c3708 • intel atom c c3750 • intel atom c c3758 • intel atom c c3808 • intel atom c c3830 • intel atom c c3850 • intel atom c c3858 • intel atom c c3950 • intel atom c c3955 • intel atom c c3958 • intel atom e e3805 • intel atom e e3815 • intel atom e e3825 • intel atom e e3826 • intel atom e e3827 • intel atom e e3845 • intel atom x3 c3130 • intel atom x3 c3200rk • intel atom x3 c3205rk • intel atom x3 c3230rk • intel atom x3 c3235rk • intel atom x3 c3265rk • intel atom x3 c3295rk • intel atom x3 c3405 • intel atom x3 c3445 • intel atom z z2420 • intel atom z z2460 • intel atom z z2480 • intel atom z z2520 • intel atom z z2560 • intel atom z z2580 • intel atom z z2760 • intel atom z z3460 • intel atom z z3480 • intel atom z z3530 • intel atom z z3560 • intel atom z z3570 • intel atom z z3580 … and 999 more

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

Referenced by CWE · observed example (3)

  • CWE-1037 Processor Optimization Removal or Modification of Security-critical Code weakness
  • CWE-1264 Hardware Logic with Insecure De-Synchronization between Control and Data Channels weakness
  • CWE-1423 Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution weakness

References