CVE-2017-5754

Medium

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of…

intel·CWE-200·Published 2018-01-04

CVSS

5.6

EPSS

0.84

KEV

Exploits

Vendor statements (25)

cve.orgen

225 chars

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.

NVDes

240 chars

Los sistemas con microprocesadores con ejecución especulativa y predicción indirecta de ramas podrían permitir la revelación no autorizada de información al atacante con acceso de usuario local mediante un análisis de la caché de los datos.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.7	3.4	6.9	AV:L/AC:M/Au:N/C:C/I:N/A:N
3.0	Primary	NVD	5.6	1.1	4.0	CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
3.1	Primary	cve.org	5.6	—	—	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
3.1	Primary	cve.org	5.6	—	—	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
3.1	Secondary	NVD	5.6	1.1	4.0	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N