Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2018-3615

25
FAUCET Score

CVE-2018-3615 is a medium-severity vulnerability affecting Intel microprocessors with Intel SGX, allowing unauthorized disclosure of L1 data cache information via a side-channel attack. This local attack requires high complexity and low privileges, potentially leading to high confidentiality impact. While there is no known active exploitation or public exploit code, the vulnerability has garnered significant community discussion and media coverage, indicating widespread awareness and concern.

Impacted Technologies

VendorProductVersion(s)CPE
6006uCPE matchmatch criteria
cpe:2.3:h:intel:core_i3:6006u:*:*:*:*:*:*:*
6098pCPE matchmatch criteria
cpe:2.3:h:intel:core_i3:6098p:*:*:*:*:*:*:*
6100CPE matchmatch criteria
cpe:2.3:h:intel:core_i3:6100:*:*:*:*:*:*:*
6100eCPE matchmatch criteria
cpe:2.3:h:intel:core_i3:6100e:*:*:*:*:*:*:*
6100hCPE matchmatch criteria
cpe:2.3:h:intel:core_i3:6100h:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

6.4MEDIUM

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N

Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
Exploitability Score
1.1
Impact Score
4.7
CvssVersion
3.0

Exploit Intelligence

EPSS Score
6.30%
Probability of exploitation in next 30 days
EPSS Percentile
92.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
This CVE's current EPSS score of 0.0630 is in the 99th percentile among its peer group of 1,296 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.4 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Advisories (1)

redhatCVE-2018-3615

CVE-2018-3615

References

cert-portal.siemens.com / productcert/pdf/ssa-254686.pdf
cert-portal.siemens.com / productcert/pdf/ssa-608355.pdf
foreshadowattack.eu
Technical DescriptionThird Party Advisory
lists.debian.org / debian-lts-announce/2018/09/msg00017.html
psirt.global.sonicwall.com / vuln-detail/SNWLID-2018-0008
Third Party Advisory
security.netapp.com / advisory/ntap-20180815-0001
Third Party Advisory
software.intel.com / security-software-guidance/software-guidance/l1-terminal-fault
MitigationVendor Advisory
support.f5.com / csp/article/K35558453
Third Party Advisory
support.hpe.com / hpsc/doc/public/display
Third Party Advisory
tools.cisco.com / security/center/content/CiscoSecurityAdvisory/cisco-sa-20180814-cpusidechannel
Third Party Advisory
support.lenovo.com / us/en/solutions/LEN-24163
Third Party Advisory
intel.com / content/www/us/en/security-center/advisory/intel-sa-00161.html
Vendor Advisory
kb.cert.org / vuls/id/982149
Third Party Advisory
synology.com / support/security/Synology_SA_18_45
Third Party Advisory
huawei.com / en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en
Third Party Advisory
securityfocus.com / bid/105080
Third Party AdvisoryVDB Entry
securitytracker.com / id/1041451
Third Party AdvisoryVDB Entry