Attacker Value

Unknown

CVE-2018-9056

CVE ID

AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:

CVE ID:

Add References:

Advisory

Description: URL:

Add Another

Exploit

Description: URL:

Add Another

Mitigation

Description: URL:

Add Another

Government or Industry Alert

Description: URL:

Add Another

Miscellaneous

Description: URL:

Add Another

Attacker Value

Unknown

(0 users assessed)

Exploitability

Unknown

(0 users assessed)

User Interaction

Unknown

Privileges Required

Unknown

Attack Vector

Unknown

CVE-2018-9056

Disclosure Date: March 27, 2018 •

(Last updated November 26, 2024) ▾

CVE-2018-9056

MITRE ATT&CK Log in to add MITRE ATT&CK tag

Add MITRE ATT&CK tactics and techniques that apply to this CVE.

MITRE ATT&CK

Select the MITRE ATT&CK Tactics that apply to this CVE

Collection

Select any Techniques used:

Data from Local System

Data from Removable Media

Data from Network Shared Drive

Input Capture

Input Capture: Keylogging

Input Capture: GUI Input Capture

Input Capture: Web Portal Capture

Input Capture: Credential API Hooking

Data Staged

Data Staged: Local Data Staging

Data Staged: Remote Data Staging

Screen Capture

Email Collection

Email Collection: Local Email Collection

Email Collection: Remote Email Collection

Email Collection: Email Forwarding Rule

Clipboard Data

Automated Collection

Audio Capture

Video Capture

Man in the Browser

Data from Information Repositories

Data from Information Repositories: Confluence

Data from Information Repositories: Sharepoint

Data from Cloud Storage Object

Man-in-the-Middle

Man-in-the-Middle: LLMNR/NBT-NS Poisoning and SMB Relay

Archive Collected Data

Archive Collected Data: Archive via Utility

Archive Collected Data: Archive via Library

Archive Collected Data: Archive via Custom Method

Command and Control

Select any Techniques used:

Data Obfuscation

Data Obfuscation: Junk Data

Data Obfuscation: Steganography

Data Obfuscation: Protocol Impersonation

Fallback Channels

Application Layer Protocol

Application Layer Protocol: Web Protocols

Application Layer Protocol: File Transfer Protocols

Application Layer Protocol: Mail Protocols

Application Layer Protocol: DNS

Proxy

Proxy: Internal Proxy

Proxy: External Proxy

Proxy: Multi-hop Proxy

Proxy: Domain Fronting

Communication Through Removable Media

Non-Application Layer Protocol

Web Service

Web Service: Dead Drop Resolver

Web Service: Bidirectional Communication

Web Service: One-Way Communication

Multi-Stage Channels

Ingress Tool Transfer

Data Encoding

Data Encoding: Standard Encoding

Data Encoding: Non-Standard Encoding

Traffic Signaling

Traffic Signaling: Port Knocking

Remote Access Software

Dynamic Resolution

Dynamic Resolution: Fast Flux DNS

Dynamic Resolution: Domain Generation Algorithms

Dynamic Resolution: DNS Calculation

Non-Standard Port

Protocol Tunneling

Encrypted Channel

Encrypted Channel: Symmetric Cryptography

Encrypted Channel: Asymmetric Cryptography

Credential Access

Select any Techniques used:

OS Credential Dumping

OS Credential Dumping: LSASS Memory

OS Credential Dumping: Security Account Manager

OS Credential Dumping: NTDS

OS Credential Dumping: LSA Secrets

OS Credential Dumping: Cached Domain Credentials

OS Credential Dumping: DCSync

OS Credential Dumping: Proc Filesystem

OS Credential Dumping: /etc/passwd and /etc/shadow

Network Sniffing

Input Capture

Input Capture: Keylogging

Input Capture: GUI Input Capture

Input Capture: Web Portal Capture

Input Capture: Credential API Hooking

Brute Force

Brute Force: Password Guessing

Brute Force: Password Cracking

Brute Force: Password Spraying

Brute Force: Credential Stuffing

Two-Factor Authentication Interception

Forced Authentication

Exploitation for Credential Access

Steal Application Access Token

Steal Web Session Cookie

Unsecured Credentials

Unsecured Credentials: Credentials In Files

Unsecured Credentials: Credentials in Registry

Unsecured Credentials: Bash History

Unsecured Credentials: Private Keys

Unsecured Credentials: Cloud Instance Metadata API

Unsecured Credentials: Group Policy Preferences

Credentials from Password Stores

Credentials from Password Stores: Keychain

Credentials from Password Stores: Securityd Memory

Credentials from Password Stores: Credentials from Web Browsers

Modify Authentication Process

Modify Authentication Process: Domain Controller Authentication

Modify Authentication Process: Password Filter DLL

Modify Authentication Process: Pluggable Authentication Modules

Man-in-the-Middle

Man-in-the-Middle: LLMNR/NBT-NS Poisoning and SMB Relay

Steal or Forge Kerberos Tickets

Steal or Forge Kerberos Tickets: Golden Ticket

Steal or Forge Kerberos Tickets: Silver Ticket

Steal or Forge Kerberos Tickets: Kerberoasting

Defense Evasion

Select any Techniques used:

Direct Volume Access

Rootkit

Obfuscated Files or Information

Obfuscated Files or Information: Binary Padding

Obfuscated Files or Information: Software Packing

Obfuscated Files or Information: Steganography

Obfuscated Files or Information: Compile After Delivery

Obfuscated Files or Information: Indicator Removal from Tools

Masquerading

Masquerading: Invalid Code Signature

Masquerading: Right-to-Left Override

Masquerading: Rename System Utilities

Masquerading: Masquerade Task or Service

Masquerading: Match Legitimate Name or Location

Masquerading: Space after Filename

Process Injection

Process Injection: Dynamic-link Library Injection

Process Injection: Portable Executable Injection

Process Injection: Thread Execution Hijacking

Process Injection: Asynchronous Procedure Call

Process Injection: Thread Local Storage

Process Injection: Ptrace System Calls

Process Injection: Proc Memory

Process Injection: Extra Window Memory Injection

Process Injection: Process Hollowing

Process Injection: Process Doppelgänging

Process Injection: VDSO Hijacking

Indicator Removal on Host

Indicator Removal on Host: Clear Windows Event Logs

Indicator Removal on Host: Clear Linux or Mac System Logs

Indicator Removal on Host: Clear Command History

Indicator Removal on Host: File Deletion

Indicator Removal on Host: Network Share Connection Removal

Indicator Removal on Host: Timestomp

Valid Accounts

Valid Accounts: Default Accounts

Valid Accounts: Domain Accounts

Valid Accounts: Local Accounts

Valid Accounts: Cloud Accounts

Modify Registry

Trusted Developer Utilities Proxy Execution

Trusted Developer Utilities Proxy Execution: MSBuild

Access Token Manipulation

Access Token Manipulation: Token Impersonation/Theft

Access Token Manipulation: Create Process with Token

Access Token Manipulation: Make and Impersonate Token

Access Token Manipulation: Parent PID Spoofing

Access Token Manipulation: SID-History Injection

Deobfuscate/Decode Files or Information

BITS Jobs

Indirect Command Execution

Traffic Signaling

Traffic Signaling: Port Knocking

Rogue Domain Controller

Exploitation for Defense Evasion

Signed Script Proxy Execution

Signed Script Proxy Execution: PubPrn

Signed Binary Proxy Execution

Signed Binary Proxy Execution: Compiled HTML File

Signed Binary Proxy Execution: Control Panel

Signed Binary Proxy Execution: CMSTP

Signed Binary Proxy Execution: InstallUtil

Signed Binary Proxy Execution: Mshta

Signed Binary Proxy Execution: Msiexec

Signed Binary Proxy Execution: Odbcconf

Signed Binary Proxy Execution: Regsvcs/Regasm

Signed Binary Proxy Execution: Regsvr32

Signed Binary Proxy Execution: Rundll32

XSL Script Processing

Template Injection

File and Directory Permissions Modification

File and Directory Permissions Modification: Windows File and Directory Permissions Modification

File and Directory Permissions Modification: Linux and Mac File and Directory Permissions Modification

Execution Guardrails

Execution Guardrails: Environmental Keying

Group Policy Modification

Virtualization/Sandbox Evasion

Virtualization/Sandbox Evasion: System Checks

Virtualization/Sandbox Evasion: User Activity Based Checks

Virtualization/Sandbox Evasion: Time Based Evasion

Unused/Unsupported Cloud Regions

Pre-OS Boot

Pre-OS Boot: System Firmware

Pre-OS Boot: Component Firmware

Pre-OS Boot: Bootkit

Abuse Elevation Control Mechanism

Abuse Elevation Control Mechanism: Setuid and Setgid

Abuse Elevation Control Mechanism: Bypass User Access Control

Abuse Elevation Control Mechanism: Sudo and Sudo Caching

Abuse Elevation Control Mechanism: Elevated Execution with Prompt

Use Alternate Authentication Material

Use Alternate Authentication Material: Application Access Token

Use Alternate Authentication Material: Pass the Hash

Use Alternate Authentication Material: Pass the Ticket

Use Alternate Authentication Material: Web Session Cookie

Subvert Trust Controls

Subvert Trust Controls: Gatekeeper Bypass

Subvert Trust Controls: Code Signing

Subvert Trust Controls: SIP and Trust Provider Hijacking

Subvert Trust Controls: Install Root Certificate

Modify Authentication Process

Modify Authentication Process: Domain Controller Authentication

Modify Authentication Process: Password Filter DLL

Modify Authentication Process: Pluggable Authentication Modules

Impair Defenses

Impair Defenses: Disable or Modify Tools

Impair Defenses: Disable Windows Event Logging

Impair Defenses: HISTCONTROL

Impair Defenses: Disable or Modify System Firewall

Impair Defenses: Indicator Blocking

Impair Defenses: Disable or Modify Cloud Firewall

Hide Artifacts

Hide Artifacts: Hidden Files and Directories

Hide Artifacts: Hidden Users

Hide Artifacts: Hidden Window

Hide Artifacts: NTFS File Attributes

Hide Artifacts: Hidden File System

Hide Artifacts: Run Virtual Instance

Hijack Execution Flow

Hijack Execution Flow: DLL Search Order Hijacking

Hijack Execution Flow: DLL Side-Loading

Hijack Execution Flow: Dylib Hijacking

Hijack Execution Flow: Executable Installer File Permissions Weakness

Hijack Execution Flow: LD_PRELOAD

Hijack Execution Flow: Path Interception by PATH Environment Variable

Hijack Execution Flow: Path Interception by Search Order Hijacking

Hijack Execution Flow: Path Interception by Unquoted Path

Hijack Execution Flow: Services File Permissions Weakness

Hijack Execution Flow: Services Registry Permissions Weakness

Hijack Execution Flow: COR_PROFILER

Modify Cloud Compute Infrastructure

Modify Cloud Compute Infrastructure: Create Snapshot

Modify Cloud Compute Infrastructure: Create Cloud Instance

Modify Cloud Compute Infrastructure: Delete Cloud Instance

Modify Cloud Compute Infrastructure: Revert Cloud Instance

Discovery

Select any Techniques used:

System Service Discovery

Application Window Discovery

Query Registry

System Network Configuration Discovery

Remote System Discovery

System Owner/User Discovery

Network Sniffing

Network Service Scanning

System Network Connections Discovery

Process Discovery

Permission Groups Discovery

Permission Groups Discovery: Local Groups

Permission Groups Discovery: Domain Groups

Permission Groups Discovery: Cloud Groups

System Information Discovery

File and Directory Discovery

Account Discovery

Account Discovery: Local Account

Account Discovery: Domain Account

Account Discovery: Email Account

Account Discovery: Cloud Account

Peripheral Device Discovery

System Time Discovery

Network Share Discovery

Password Policy Discovery

Browser Bookmark Discovery

Domain Trust Discovery

Virtualization/Sandbox Evasion

Virtualization/Sandbox Evasion: System Checks

Virtualization/Sandbox Evasion: User Activity Based Checks

Virtualization/Sandbox Evasion: Time Based Evasion

Software Discovery

Software Discovery: Security Software Discovery

Cloud Service Discovery

Cloud Service Dashboard

Execution

Select any Techniques used:

Windows Management Instrumentation

Scheduled Task/Job

Scheduled Task/Job: At (Linux)

Scheduled Task/Job: At (Windows)

Scheduled Task/Job: Cron

Scheduled Task/Job: Launchd

Scheduled Task/Job: Scheduled Task

Command and Scripting Interpreter

Command and Scripting Interpreter: PowerShell

Command and Scripting Interpreter: AppleScript

Command and Scripting Interpreter: Windows Command Shell

Command and Scripting Interpreter: Unix Shell

Command and Scripting Interpreter: Visual Basic

Command and Scripting Interpreter: Python

Command and Scripting Interpreter: JavaScript/JScript

Software Deployment Tools

Native API

Shared Modules

Exploitation for Client Execution

User Execution

User Execution: Malicious Link

User Execution: Malicious File

Inter-Process Communication

Inter-Process Communication: Component Object Model

Inter-Process Communication: Dynamic Data Exchange

System Services

System Services: Launchctl

System Services: Service Execution

Exfiltration

Select any Techniques used:

Exfiltration Over Other Network Medium

Exfiltration Over Other Network Medium: Exfiltration Over Bluetooth

Automated Exfiltration

Scheduled Transfer

Data Transfer Size Limits

Exfiltration Over C2 Channel

Exfiltration Over Alternative Protocol

Exfiltration Over Alternative Protocol: Exfiltration Over Symmetric Encrypted Non-C2 Protocol

Exfiltration Over Alternative Protocol: Exfiltration Over Asymmetric Encrypted Non-C2 Protocol

Exfiltration Over Alternative Protocol: Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol

Exfiltration Over Physical Medium

Exfiltration Over Physical Medium: Exfiltration over USB

Transfer Data to Cloud Account

Exfiltration Over Web Service

Exfiltration Over Web Service: Exfiltration to Code Repository

Exfiltration Over Web Service: Exfiltration to Cloud Storage

Impact

Select any Techniques used:

Data Destruction

Data Encrypted for Impact

Service Stop

Inhibit System Recovery

Defacement

Defacement: Internal Defacement

Defacement: External Defacement

Firmware Corruption

Resource Hijacking

Network Denial of Service

Network Denial of Service: Direct Network Flood

Network Denial of Service: Reflection Amplification

Endpoint Denial of Service

Endpoint Denial of Service: OS Exhaustion Flood

Endpoint Denial of Service: Service Exhaustion Flood

Endpoint Denial of Service: Application Exhaustion Flood

Endpoint Denial of Service: Application or System Exploitation

System Shutdown/Reboot

Account Access Removal

Disk Wipe

Disk Wipe: Disk Content Wipe

Disk Wipe: Disk Structure Wipe

Data Manipulation

Data Manipulation: Stored Data Manipulation

Data Manipulation: Transmitted Data Manipulation

Data Manipulation: Runtime Data Manipulation

Initial Access

Select any Techniques used:

Valid Accounts

Valid Accounts: Default Accounts

Valid Accounts: Domain Accounts

Valid Accounts: Local Accounts

Valid Accounts: Cloud Accounts

Replication Through Removable Media

External Remote Services

Drive-by Compromise

Exploit Public-Facing Application

Supply Chain Compromise

Supply Chain Compromise: Compromise Software Dependencies and Development Tools

Supply Chain Compromise: Compromise Software Supply Chain

Supply Chain Compromise: Compromise Hardware Supply Chain

Trusted Relationship

Hardware Additions

Phishing

Phishing: Spearphishing Attachment

Phishing: Spearphishing Link

Phishing: Spearphishing via Service

Lateral Movement

Select any Techniques used:

Remote Services

Remote Services: Remote Desktop Protocol

Remote Services: SMB/Windows Admin Shares

Remote Services: Distributed Component Object Model

Remote Services: SSH

Remote Services: VNC

Remote Services: Windows Remote Management

Software Deployment Tools

Taint Shared Content

Replication Through Removable Media

Exploitation of Remote Services

Internal Spearphishing

Use Alternate Authentication Material

Use Alternate Authentication Material: Application Access Token

Use Alternate Authentication Material: Pass the Hash

Use Alternate Authentication Material: Pass the Ticket

Use Alternate Authentication Material: Web Session Cookie

Remote Service Session Hijacking

Remote Service Session Hijacking: SSH Hijacking

Remote Service Session Hijacking: RDP Hijacking

Lateral Tool Transfer

Persistence

Select any Techniques used:

Boot or Logon Initialization Scripts

Boot or Logon Initialization Scripts: Logon Script (Windows)

Boot or Logon Initialization Scripts: Logon Script (Mac)

Boot or Logon Initialization Scripts: Network Logon Script

Boot or Logon Initialization Scripts: Rc.common

Boot or Logon Initialization Scripts: Startup Items

Scheduled Task/Job

Scheduled Task/Job: At (Linux)

Scheduled Task/Job: At (Windows)

Scheduled Task/Job: Cron

Scheduled Task/Job: Launchd

Scheduled Task/Job: Scheduled Task

Valid Accounts

Valid Accounts: Default Accounts

Valid Accounts: Domain Accounts

Valid Accounts: Local Accounts

Valid Accounts: Cloud Accounts

Account Manipulation

Account Manipulation: Additional Azure Service Principal Credentials

Account Manipulation: Exchange Email Delegate Permissions

Account Manipulation: Add Office 365 Global Administrator Role

Account Manipulation: SSH Authorized Keys

External Remote Services

Create Account

Create Account: Local Account

Create Account: Domain Account

Create Account: Cloud Account

Office Application Startup

Office Application Startup: Office Template Macros

Office Application Startup: Office Test

Office Application Startup: Outlook Forms

Office Application Startup: Outlook Home Page

Office Application Startup: Outlook Rules

Office Application Startup: Add-ins

Browser Extensions

BITS Jobs

Traffic Signaling

Traffic Signaling: Port Knocking

Server Software Component

Server Software Component: SQL Stored Procedures

Server Software Component: Transport Agent

Server Software Component: Web Shell

Implant Container Image

Pre-OS Boot

Pre-OS Boot: System Firmware

Pre-OS Boot: Component Firmware

Pre-OS Boot: Bootkit

Create or Modify System Process

Create or Modify System Process: Launch Agent

Create or Modify System Process: Systemd Service

Create or Modify System Process: Windows Service

Create or Modify System Process: Launch Daemon

Event Triggered Execution

Event Triggered Execution: Change Default File Association

Event Triggered Execution: Screensaver

Event Triggered Execution: Windows Management Instrumentation Event Subscription

Event Triggered Execution: .bash_profile and .bashrc

Event Triggered Execution: Trap

Event Triggered Execution: LC_LOAD_DYLIB Addition

Event Triggered Execution: Netsh Helper DLL

Event Triggered Execution: Accessibility Features

Event Triggered Execution: AppCert DLLs

Event Triggered Execution: AppInit DLLs

Event Triggered Execution: Application Shimming

Event Triggered Execution: Image File Execution Options Injection

Event Triggered Execution: PowerShell Profile

Event Triggered Execution: Emond

Event Triggered Execution: Component Object Model Hijacking

Boot or Logon Autostart Execution

Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder

Boot or Logon Autostart Execution: Authentication Package

Boot or Logon Autostart Execution: Time Providers

Boot or Logon Autostart Execution: Winlogon Helper DLL

Boot or Logon Autostart Execution: Security Support Provider

Boot or Logon Autostart Execution: Kernel Modules and Extensions

Boot or Logon Autostart Execution: Re-opened Applications

Boot or Logon Autostart Execution: LSASS Driver

Boot or Logon Autostart Execution: Shortcut Modification

Boot or Logon Autostart Execution: Port Monitors

Boot or Logon Autostart Execution: Plist Modification

Compromise Client Software Binary

Hijack Execution Flow

Hijack Execution Flow: DLL Search Order Hijacking

Hijack Execution Flow: DLL Side-Loading

Hijack Execution Flow: Dylib Hijacking

Hijack Execution Flow: Executable Installer File Permissions Weakness

Hijack Execution Flow: LD_PRELOAD

Hijack Execution Flow: Path Interception by PATH Environment Variable

Hijack Execution Flow: Path Interception by Search Order Hijacking

Hijack Execution Flow: Path Interception by Unquoted Path

Hijack Execution Flow: Services File Permissions Weakness

Hijack Execution Flow: Services Registry Permissions Weakness

Hijack Execution Flow: COR_PROFILER

Privilege Escalation

Select any Techniques used:

Boot or Logon Initialization Scripts

Boot or Logon Initialization Scripts: Logon Script (Windows)

Boot or Logon Initialization Scripts: Logon Script (Mac)

Boot or Logon Initialization Scripts: Network Logon Script

Boot or Logon Initialization Scripts: Rc.common

Boot or Logon Initialization Scripts: Startup Items

Scheduled Task/Job

Scheduled Task/Job: At (Linux)

Scheduled Task/Job: At (Windows)

Scheduled Task/Job: Cron

Scheduled Task/Job: Launchd

Scheduled Task/Job: Scheduled Task

Process Injection

Process Injection: Dynamic-link Library Injection

Process Injection: Portable Executable Injection

Process Injection: Thread Execution Hijacking

Process Injection: Asynchronous Procedure Call

Process Injection: Thread Local Storage

Process Injection: Ptrace System Calls

Process Injection: Proc Memory

Process Injection: Extra Window Memory Injection

Process Injection: Process Hollowing

Process Injection: Process Doppelgänging

Process Injection: VDSO Hijacking

Exploitation for Privilege Escalation

Valid Accounts

Valid Accounts: Default Accounts

Valid Accounts: Domain Accounts

Valid Accounts: Local Accounts

Valid Accounts: Cloud Accounts

Access Token Manipulation

Access Token Manipulation: Token Impersonation/Theft

Access Token Manipulation: Create Process with Token

Access Token Manipulation: Make and Impersonate Token

Access Token Manipulation: Parent PID Spoofing

Access Token Manipulation: SID-History Injection

Group Policy Modification

Create or Modify System Process

Create or Modify System Process: Launch Agent

Create or Modify System Process: Systemd Service

Create or Modify System Process: Windows Service

Create or Modify System Process: Launch Daemon

Event Triggered Execution

Event Triggered Execution: Change Default File Association

Event Triggered Execution: Screensaver

Event Triggered Execution: Windows Management Instrumentation Event Subscription

Event Triggered Execution: .bash_profile and .bashrc

Event Triggered Execution: Trap

Event Triggered Execution: LC_LOAD_DYLIB Addition

Event Triggered Execution: Netsh Helper DLL

Event Triggered Execution: Accessibility Features

Event Triggered Execution: AppCert DLLs

Event Triggered Execution: AppInit DLLs

Event Triggered Execution: Application Shimming

Event Triggered Execution: Image File Execution Options Injection

Event Triggered Execution: PowerShell Profile

Event Triggered Execution: Emond

Event Triggered Execution: Component Object Model Hijacking

Boot or Logon Autostart Execution

Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder

Boot or Logon Autostart Execution: Authentication Package

Boot or Logon Autostart Execution: Time Providers

Boot or Logon Autostart Execution: Winlogon Helper DLL

Boot or Logon Autostart Execution: Security Support Provider

Boot or Logon Autostart Execution: Kernel Modules and Extensions

Boot or Logon Autostart Execution: Re-opened Applications

Boot or Logon Autostart Execution: LSASS Driver

Boot or Logon Autostart Execution: Shortcut Modification

Boot or Logon Autostart Execution: Port Monitors

Boot or Logon Autostart Execution: Plist Modification

Abuse Elevation Control Mechanism

Abuse Elevation Control Mechanism: Setuid and Setgid

Abuse Elevation Control Mechanism: Bypass User Access Control

Abuse Elevation Control Mechanism: Sudo and Sudo Caching

Abuse Elevation Control Mechanism: Elevated Execution with Prompt

Hijack Execution Flow

Hijack Execution Flow: DLL Search Order Hijacking

Hijack Execution Flow: DLL Side-Loading

Hijack Execution Flow: Dylib Hijacking

Hijack Execution Flow: Executable Installer File Permissions Weakness

Hijack Execution Flow: LD_PRELOAD

Hijack Execution Flow: Path Interception by PATH Environment Variable

Hijack Execution Flow: Path Interception by Search Order Hijacking

Hijack Execution Flow: Path Interception by Unquoted Path

Hijack Execution Flow: Services File Permissions Weakness

Hijack Execution Flow: Services Registry Permissions Weakness

Hijack Execution Flow: COR_PROFILER

Topic Tags

Select the tags that apply to this CVE (Assessment added tags are disabled and cannot be removed)

What makes this of high-value to an attacker?

Vulnerable in default configuration

Unauthenticated

Observed in state-sponsored attacks

Observed in ransomware attacks

Gives privileged access

Easy to weaponize

Difficult to patch

Common in enterprise

CISA KEV Listed

What makes this of low-value to an attacker?

Vulnerable in uncommon configuration

Requires user interaction

Requires physical access

Requires elevated access

No useful access

Difficult to weaponize

Authenticated

Description

Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table (PHT), aka BranchScope.

See More See Less

Ratings & Analysis
Vulnerability Details

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics

Data provided by the National Vulnerability Database (NVD)

Base Score:

None

Impact Score:

Unknown

Exploitability Score:

Unknown

Vector:

Unknown

Attack Vector (AV):

Unknown

Attack Complexity (AC):

Unknown

Privileges Required (PR):

Unknown

User Interaction (UI):

Unknown

Scope (S):

Unknown

Confidentiality (C):

Unknown

Integrity (I):

Unknown

Availability (A):

Unknown

General Information

Offensive Application

Unknown

Utility Class

Unknown

Ports

Unknown

Vulnerable Versions

n/a

Prerequisites

Unknown

Discovered By

Unknown

PoC Author

Unknown

Metasploit Module

Unknown

Reporter

Unknown

Vendors

arm,
intel

Products

atom c c2308,
atom c c2316,
atom c c2338,
atom c c2350,
atom c c2358,
atom c c2508,
atom c c2516,
atom c c2518,
atom c c2530,
atom c c2538,
atom c c2550,
atom c c2558,
atom c c2718,
atom c c2730,
atom c c2738,
atom c c2750,
atom c c2758,
atom c c3308,
atom c c3338,
atom c c3508,
atom c c3538,
atom c c3558,
atom c c3708,
atom c c3750,
atom c c3758,
atom c c3808,
atom c c3830,
atom c c3850,
atom c c3858,
atom c c3950,
atom c c3955,
atom c c3958,
atom e e3805,
atom e e3815,
atom e e3825,
atom e e3826,
atom e e3827,
atom e e3845,
atom x3 c3130,
atom x3 c3200rk,
atom x3 c3205rk,
atom x3 c3230rk,
atom x3 c3235rk,
atom x3 c3265rk,
atom x3 c3295rk,
atom x3 c3405,
atom x3 c3445,
atom z z2420,
atom z z2460,
atom z z2480,
atom z z2520,
atom z z2560,
atom z z2580,
atom z z2760,
atom z z3460,
atom z z3480,
atom z z3530,
atom z z3560,
atom z z3570,
atom z z3580,
atom z z3590,
atom z z3735d,
atom z z3735e,
atom z z3735f,
atom z z3735g,
atom z z3736f,
atom z z3736g,
atom z z3740,
atom z z3740d,
atom z z3745,
atom z z3745d,
atom z z3770,
atom z z3770d,
atom z z3775,
atom z z3775d,
atom z z3785,
atom z z3795,
celeron j j1750,
celeron j j1800,
celeron j j1850,
celeron j j1900,
celeron j j3060,
celeron j j3160,
celeron j j3355,
celeron j j3455,
celeron j j4005,
celeron j j4105,
celeron n n2805,
celeron n n2806,
celeron n n2807,
celeron n n2808,
celeron n n2810,
celeron n n2815,
celeron n n2820,
celeron n n2830,
celeron n n2840,
celeron n n2910,
celeron n n2920,
celeron n n2930,
celeron n n2940,
celeron n n3000,
celeron n n3010,
celeron n n3050,
celeron n n3060,
celeron n n3150,
celeron n n3160,
celeron n n3350,
celeron n n3450,
celeron n n4000,
celeron n n4100,
core i3 2100,
core i3 2100t,
core i3 2102,
core i3 2105,
core i3 2115c,
core i3 2120,
core i3 2120t,
core i3 2125,
core i3 2130,
core i3 2310e,
core i3 2310m,
core i3 2312m,
core i3 2328m,
core i3 2330e,
core i3 2330m,
core i3 2340ue,
core i3 2348m,
core i3 2350m,
core i3 2357m,
core i3 2365m,
core i3 2367m,
core i3 2370m,
core i3 2375m,
core i3 2377m,
core i3 3110m,
core i3 3115c,
core i3 3120m,
core i3 3120me,
core i3 3130m,
core i3 3210,
core i3 3217u,
core i3 3217ue,
core i3 3220,
core i3 3220t,
core i3 3225,
core i3 3227u,
core i3 3229y,
core i3 3240,
core i3 3240t,
core i3 3245,
core i3 3250,
core i3 3250t,
core i3 330e,
core i3 330m,
core i3 330um,
core i3 350m,
core i3 370m,
core i3 380m,
core i3 380um,
core i3 390m,
core i3 4000m,
core i3 4005u,
core i3 4010u,
core i3 4010y,
core i3 4012y,
core i3 4020y,
core i3 4025u,
core i3 4030u,
core i3 4030y,
core i3 4100e,
core i3 4100m,
core i3 4100u,
core i3 4102e,
core i3 4110e,
core i3 4110m,
core i3 4112e,
core i3 4120u,
core i3 4130,
core i3 4130t,
core i3 4150,
core i3 4150t,
core i3 4158u,
core i3 4160,
core i3 4160t,
core i3 4170,
core i3 4170t,
core i3 4330,
core i3 4330t,
core i3 4330te,
core i3 4340,
core i3 4340te,
core i3 4350,
core i3 4350t,
core i3 4360,
core i3 4360t,
core i3 4370,
core i3 4370t,
core i3 5005u,
core i3 5010u,
core i3 5015u,
core i3 5020u,
core i3 5157u,
core i3 530,
core i3 540,
core i3 550,
core i3 560,
core i3 6006u,
core i3 6098p,
core i3 6100,
core i3 6100e,
core i3 6100h,
core i3 6100t,
core i3 6100te,
core i3 6100u,
core i3 6102e,
core i3 6157u,
core i3 6167u,
core i3 6300,
core i3 6300t,
core i3 6320,
core i3 8100,
core i3 8350k,
core i5 2300,
core i5 2310,
core i5 2320,
core i5 2380p,
core i5 2390t,
core i5 2400,
core i5 2400s,
core i5 2405s,
core i5 2410m,
core i5 2430m,
core i5 2435m,
core i5 2450m,
core i5 2450p,
core i5 2467m,
core i5 2500,
core i5 2500k,
core i5 2500s,
core i5 2500t,
core i5 2510e,
core i5 2515e,
core i5 2520m,
core i5 2537m,
core i5 2540m,
core i5 2550k,
core i5 2557m,
core i5 3210m,
core i5 3230m,
core i5 3317u,
core i5 3320m,
core i5 3330,
core i5 3330s,
core i5 3337u,
core i5 3339y,
core i5 3340,
core i5 3340m,
core i5 3340s,
core i5 3350p,
core i5 3360m,
core i5 3380m,
core i5 3427u,
core i5 3437u,
core i5 3439y,
core i5 3450,
core i5 3450s,
core i5 3470,
core i5 3470s,
core i5 3470t,
core i5 3475s,
core i5 3550,
core i5 3550s,
core i5 3570,
core i5 3570k,
core i5 3570s,
core i5 3570t,
core i5 3610me,
core i5 4200h,
core i5 4200m,
core i5 4200u,
core i5 4200y,
core i5 4202y,
core i5 4210h,
core i5 4210m,
core i5 4210u,
core i5 4210y,
core i5 4220y,
core i5 4250u,
core i5 4258u,
core i5 4260u,
core i5 4278u,
core i5 4288u,
core i5 4300m,
core i5 4300u,
core i5 4300y,
core i5 4302y,
core i5 4308u,
core i5 430m,
core i5 430um,
core i5 4310m,
core i5 4310u,
core i5 4330m,
core i5 4340m,
core i5 4350u,
core i5 4360u,
core i5 4400e,
core i5 4402e,
core i5 4402ec,
core i5 4410e,
core i5 4422e,
core i5 4430,
core i5 4430s,
core i5 4440,
core i5 4440s,
core i5 4460,
core i5 4460s,
core i5 4460t,
core i5 450m,
core i5 4570,
core i5 4570r,
core i5 4570s,
core i5 4570t,
core i5 4570te,
core i5 4590,
core i5 4590s,
core i5 4590t,
core i5 460m,
core i5 4670,
core i5 4670k,
core i5 4670r,
core i5 4670s,
core i5 4670t,
core i5 4690,
core i5 4690k,
core i5 4690s,
core i5 4690t,
core i5 470um,
core i5 480m,
core i5 5200u,
core i5 520e,
core i5 520m,
core i5 520um,
core i5 5250u,
core i5 5257u,
core i5 5287u,
core i5 5300u,
core i5 5350h,
core i5 5350u,
core i5 540m,
core i5 540um,
core i5 5575r,
core i5 560m,
core i5 560um,
core i5 5675c,
core i5 5675r,
core i5 580m,
core i5 6200u,
core i5 6260u,
core i5 6267u,
core i5 6287u,
core i5 6300hq,
core i5 6300u,
core i5 6350hq,
core i5 6360u,
core i5 6400,
core i5 6400t,
core i5 6402p,
core i5 6440eq,
core i5 6440hq,
core i5 6442eq,
core i5 650,
core i5 6500,
core i5 6500t,
core i5 6500te,
core i5 655k,
core i5 6585r,
core i5 660,
core i5 6600,
core i5 6600k,
core i5 6600t,
core i5 661,
core i5 6685r,
core i5 670,
core i5 680,
core i5 750,
core i5 750s,
core i5 760,
core i5 8250u,
core i5 8350u,
core i5 8400,
core i5 8600k,
core i7 2600,
core i7 2600k,
core i7 2600s,
core i7 2610ue,
core i7 2617m,
core i7 2620m,
core i7 2629m,
core i7 2630qm,
core i7 2635qm,
core i7 2637m,
core i7 2640m,
core i7 2649m,
core i7 2655le,
core i7 2657m,
core i7 2670qm,
core i7 2675qm,
core i7 2677m,
core i7 2700k,
core i7 2710qe,
core i7 2715qe,
core i7 2720qm,
core i7 2760qm,
core i7 2820qm,
core i7 2860qm,
core i7 2920xm,
core i7 2960xm,
core i7 3517u,
core i7 3517ue,
core i7 3520m,
core i7 3537u,
core i7 3540m,
core i7 3555le,
core i7 3610qe,
core i7 3610qm,
core i7 3612qe,
core i7 3612qm,
core i7 3615qe,
core i7 3615qm,
core i7 3630qm,
core i7 3632qm,
core i7 3635qm,
core i7 3667u,
core i7 3687u,
core i7 3689y,
core i7 3720qm,
core i7 3740qm,
core i7 3770,
core i7 3770k,
core i7 3770s,
core i7 3770t,
core i7 3820qm,
core i7 3840qm,
core i7 4500u,
core i7 4510u,
core i7 4550u,
core i7 4558u,
core i7 4578u,
core i7 4600m,
core i7 4600u,
core i7 4610m,
core i7 4610y,
core i7 4650u,
core i7 4700ec,
core i7 4700eq,
core i7 4700hq,
core i7 4700mq,
core i7 4702ec,
core i7 4702hq,
core i7 4702mq,
core i7 4710hq,
core i7 4710mq,
core i7 4712hq,
core i7 4712mq,
core i7 4720hq,
core i7 4722hq,
core i7 4750hq,
core i7 4760hq,
core i7 4765t,
core i7 4770,
core i7 4770hq,
core i7 4770k,
core i7 4770r,
core i7 4770s,
core i7 4770t,
core i7 4770te,
core i7 4771,
core i7 4785t,
core i7 4790,
core i7 4790k,
core i7 4790s,
core i7 4790t,
core i7 4800mq,
core i7 4810mq,
core i7 4850hq,
core i7 4860hq,
core i7 4870hq,
core i7 4900mq,
core i7 4910mq,
core i7 4950hq,
core i7 4960hq,
core i7 4980hq,
core i7 5500u,
core i7 5550u,
core i7 5557u,
core i7 5600u,
core i7 5650u,
core i7 5700eq,
core i7 5700hq,
core i7 5750hq,
core i7 5775c,
core i7 5775r,
core i7 5850eq,
core i7 5850hq,
core i7 5950hq,
core i7 610e,
core i7 620le,
core i7 620lm,
core i7 620m,
core i7 620ue,
core i7 620um,
core i7 640lm,
core i7 640m,
core i7 640um,
core i7 660lm,
core i7 660ue,
core i7 660um,
core i7 680um,
core i7 720qm,
core i7 740qm,
core i7 7500u,
core i7 7560u,
core i7 7567u,
core i7 7600u,
core i7 7660u,
core i7 7700,
core i7 7700hq,
core i7 7700k,
core i7 7700t,
core i7 7820eq,
core i7 7820hk,
core i7 7820hq,
core i7 7920hq,
core i7 7y75,
core i7 820qm,
core i7 840qm,
core i7 8550u,
core i7 860,
core i7 860s,
core i7 8650u,
core i7 870,
core i7 8700,
core i7 8700k,
core i7 870s,
core i7 875k,
core i7 880,
core i7 920,
core i7 920xm,
core i7 930,
core i7 940,
core i7 940xm,
core i7 950,
core i7 960,
core i7 965,
core i7 970,
core i7 975,
core i7 980,
core i7 980x,
core i7 990x,
core m 5y10,
core m 5y10a,
core m 5y10c,
core m 5y31,
core m 5y51,
core m 5y70,
core m 5y71,
core m3 6y30,
core m3 7y30,
core m3 7y32,
core m5 6y54,
core m5 6y57,
core m7 6y75,
cortex-a 15,
cortex-a 17,
cortex-a 57,
cortex-a 72,
cortex-a 73,
cortex-a 75,
cortex-a 9,
pentium j j2850,
pentium j j2900,
pentium j j3710,
pentium j j4205,
pentium n n3510,
pentium n n3520,
pentium n n3530,
pentium n n3540,
pentium n n3700,
pentium n n3710,
pentium n n4200,
xeon bronze 3104 -,
xeon bronze 3106 -,
xeon e-1105c -,
xeon e3 1105c v2 -,
xeon e3 1125c -,
xeon e3 1125c v2 -,
xeon e3 1220 -,
xeon e3 1220 v2 -,
xeon e3 1220 v3 -,
xeon e3 1220 v5 -,
xeon e3 1220 v6 -,
xeon e3 12201 -,
xeon e3 12201 v2 -,
xeon e3 1220l v3 -,
xeon e3 1225 -,
xeon e3 1225 v2 -,
xeon e3 1225 v3 -,
xeon e3 1225 v5 -,
xeon e3 1225 v6 -,
xeon e3 1226 v3 -,
xeon e3 1230 -,
xeon e3 1230 v2 -,
xeon e3 1230 v3 -,
xeon e3 1230 v5 -,
xeon e3 1230 v6 -,
xeon e3 1230l v3 -,
xeon e3 1231 v3 -,
xeon e3 1235 -,
xeon e3 1235l v5 -,
xeon e3 1240 -,
xeon e3 1240 v2 -,
xeon e3 1240 v3 -,
xeon e3 1240 v5 -,
xeon e3 1240 v6 -,
xeon e3 1240l v3 -,
xeon e3 1240l v5 -,
xeon e3 1241 v3 -,
xeon e3 1245 -,
xeon e3 1245 v2 -,
xeon e3 1245 v3 -,
xeon e3 1245 v5 -,
xeon e3 1245 v6 -,
xeon e3 1246 v3 -,
xeon e3 1258l v4 -,
xeon e3 1260l -,
xeon e3 1260l v5 -,
xeon e3 1265l v2 -,
xeon e3 1265l v3 -,
xeon e3 1265l v4 -,
xeon e3 1268l v3 -,
xeon e3 1268l v5 -,
xeon e3 1270 -,
xeon e3 1270 v2 -,
xeon e3 1270 v3 -,
xeon e3 1270 v5 -,
xeon e3 1270 v6 -,
xeon e3 1271 v3 -,
xeon e3 1275 -,
xeon e3 1275 v2 -,
xeon e3 1275 v3 -,
xeon e3 1275 v5 -,
xeon e3 1275 v6 -,
xeon e3 1275l v3 -,
xeon e3 1276 v3 -,
xeon e3 1278l v4 -,
xeon e3 1280 -,
xeon e3 1280 v2 -,
xeon e3 1280 v3 -,
xeon e3 1280 v5 -,
xeon e3 1280 v6 -,
xeon e3 1281 v3 -,
xeon e3 1285 v3 -,
xeon e3 1285 v4 -,
xeon e3 1285 v6 -,
xeon e3 1285l v3 -,
xeon e3 1285l v4 -,
xeon e3 1286 v3 -,
xeon e3 1286l v3 -,
xeon e3 1290 -,
xeon e3 1290 v2 -,
xeon e3 1501l v6 -,
xeon e3 1501m v6 -,
xeon e3 1505l v5 -,
xeon e3 1505l v6 -,
xeon e3 1505m v5 -,
xeon e3 1505m v6,
xeon e3 1515m v5,
xeon e3 1535m v5,
xeon e3 1535m v6,
xeon e3 1545m v5,
xeon e3 1558l v5,
xeon e3 1565l v5,
xeon e3 1575m v5,
xeon e3 1578l v5,
xeon e3 1585 v5,
xeon e3 1585l v5,
xeon e5 1428l -,
xeon e5 1428l v2 -,
xeon e5 1428l v3 -,
xeon e5 1620 -,
xeon e5 1620 v2 -,
xeon e5 1620 v3 -,
xeon e5 1620 v4 -,
xeon e5 1630 v3 -,
xeon e5 1630 v4 -,
xeon e5 1650 -,
xeon e5 1650 v2 -,
xeon e5 1650 v3 -,
xeon e5 1650 v4 -,
xeon e5 1660 -,
xeon e5 1660 v2 -,
xeon e5 1660 v3 -,
xeon e5 1660 v4 -,
xeon e5 1680 v3 -,
xeon e5 1680 v4 -,
xeon e5 2403 -,
xeon e5 2403 v2 -,
xeon e5 2407 -,
xeon e5 2407 v2 -,
xeon e5 2408l v3 -,
xeon e5 2418l -,
xeon e5 2418l v2 -,
xeon e5 2418l v3 -,
xeon e5 2420 -,
xeon e5 2420 v2 -,
xeon e5 2428l -,
xeon e5 2428l v2 -,
xeon e5 2428l v3 -,
xeon e5 2430 -,
xeon e5 2430 v2 -,
xeon e5 2430l -,
xeon e5 2430l v2 -,
xeon e5 2438l v3 -,
xeon e5 2440 -,
xeon e5 2440 v2 -,
xeon e5 2448l -,
xeon e5 2448l v2 -,
xeon e5 2450 -,
xeon e5 2450 v2 -,
xeon e5 2450l -,
xeon e5 2450l v2 -,
xeon e5 2470 -,
xeon e5 2470 v2 -,
xeon e5 2603 -,
xeon e5 2603 v2 -,
xeon e5 2603 v3 -,
xeon e5 2603 v4 -,
xeon e5 2608l v3 -,
xeon e5 2608l v4 -,
xeon e5 2609 -,
xeon e5 2609 v2 -,
xeon e5 2609 v3 -,
xeon e5 2609 v4 -,
xeon e5 2618l v2 -,
xeon e5 2618l v3 -,
xeon e5 2618l v4 -,
xeon e5 2620 -,
xeon e5 2620 v2 -,
xeon e5 2620 v3 -,
xeon e5 2620 v4 -,
xeon e5 2623 v3 -,
xeon e5 2623 v4 -,
xeon e5 2628l v2 -,
xeon e5 2628l v3 -,
xeon e5 2628l v4 -,
xeon e5 2630 -,
xeon e5 2630 v2 -,
xeon e5 2630 v3 -,
xeon e5 2630 v4 -,
xeon e5 2630l -,
xeon e5 2630l v2 -,
xeon e5 2630l v3 -,
xeon e5 2630l v4 -,
xeon e5 2637 -,
xeon e5 2637 v2 -,
xeon e5 2637 v3 -,
xeon e5 2637 v4 -,
xeon e5 2640 -,
xeon e5 2640 v2 -,
xeon e5 2640 v3 -,
xeon e5 2640 v4 -,
xeon e5 2643 -,
xeon e5 2643 v2 -,
xeon e5 2643 v3 -,
xeon e5 2643 v4 -,
xeon e5 2648l -,
xeon e5 2648l v2 -,
xeon e5 2648l v3 -,
xeon e5 2648l v4 -,
xeon e5 2650 -,
xeon e5 2650 v2 -,
xeon e5 2650 v3 -,
xeon e5 2650 v4 -,
xeon e5 2650l -,
xeon e5 2650l v2 -,
xeon e5 2650l v3 -,
xeon e5 2650l v4,
xeon e5 2658,
xeon e5 2658 v2,
xeon e5 2658 v3,
xeon e5 2658 v4,
xeon e5 2658a v3,
xeon e5 2660,
xeon e5 2660 v2,
xeon e5 2660 v3,
xeon e5 2660 v4,
xeon e5 2665,
xeon e5 2667,
xeon e5 2667 v2,
xeon e5 2667 v3,
xeon e5 2667 v4,
xeon e5 2670,
xeon e5 2670 v2,
xeon e5 2670 v3,
xeon e5 2680,
xeon e5 2680 v2,
xeon e5 2680 v3,
xeon e5 2680 v4,
xeon e5 2683 v3,
xeon e5 2683 v4,
xeon e5 2687w,
xeon e5 2687w v2,
xeon e5 2687w v3,
xeon e5 2687w v4,
xeon e5 2690,
xeon e5 2690 v2,
xeon e5 2690 v3,
xeon e5 2690 v4,
xeon e5 2695 v2,
xeon e5 2695 v3,
xeon e5 2695 v4,
xeon e5 2697 v2,
xeon e5 2697 v3,
xeon e5 2697 v4,
xeon e5 2697a v4,
xeon e5 2698 v3,
xeon e5 2698 v4,
xeon e5 2699 v3,
xeon e5 2699 v4,
xeon e5 2699a v4,
xeon e5 2699r v4,
xeon e5 4603,
xeon e5 4603 v2,
xeon e5 4607,
xeon e5 4607 v2,
xeon e5 4610,
xeon e5 4610 v2,
xeon e5 4610 v3,
xeon e5 4610 v4,
xeon e5 4617,
xeon e5 4620,
xeon e5 4620 v2,
xeon e5 4620 v3,
xeon e5 4620 v4,
xeon e5 4624l v2,
xeon e5 4627 v2,
xeon e5 4627 v3,
xeon e5 4627 v4,
xeon e5 4628l v4,
xeon e5 4640,
xeon e5 4640 v2,
xeon e5 4640 v3,
xeon e5 4640 v4,
xeon e5 4648 v3,
xeon e5 4650,
xeon e5 4650 v2,
xeon e5 4650 v3,
xeon e5 4650 v4,
xeon e5 4650l,
xeon e5 4655 v3,
xeon e5 4655 v4,
xeon e5 4657l v2,
xeon e5 4660 v3,
xeon e5 4660 v4,
xeon e5 4667 v3,
xeon e5 4667 v4,
xeon e5 4669 v3,
xeon e5 4669 v4,
xeon e5502,
xeon e5503,
xeon e5504,
xeon e5506,
xeon e5507,
xeon e5520,
xeon e5530,
xeon e5540,
xeon e5603,
xeon e5606,
xeon e5607,
xeon e5620,
xeon e5630,
xeon e5640,
xeon e5645,
xeon e5649,
xeon e6510,
xeon e6540,
xeon e7 2803,
xeon e7 2820,
xeon e7 2830,
xeon e7 2850,
xeon e7 2850 v2,
xeon e7 2860,
xeon e7 2870,
xeon e7 2870 v2,
xeon e7 2880 v2,
xeon e7 2890 v2,
xeon e7 4807,
xeon e7 4809 v2,
xeon e7 4809 v3,
xeon e7 4809 v4,
xeon e7 4820,
xeon e7 4820 v2,
xeon e7 4820 v3,
xeon e7 4820 v4,
xeon e7 4830,
xeon e7 4830 v2,
xeon e7 4830 v3,
xeon e7 4830 v4,
xeon e7 4850,
xeon e7 4850 v2,
xeon e7 4850 v3,
xeon e7 4850 v4,
xeon e7 4860,
xeon e7 4860 v2,
xeon e7 4870,
xeon e7 4870 v2,
xeon e7 4880 v2,
xeon e7 4890 v2,
xeon e7 8830,
xeon e7 8837,
xeon e7 8850,
xeon e7 8850 v2,
xeon e7 8857 v2,
xeon e7 8860,
xeon e7 8860 v3,
xeon e7 8860 v4,
xeon e7 8867 v3,
xeon e7 8867 v4,
xeon e7 8867l,
xeon e7 8870,
xeon e7 8870 v2,
xeon e7 8870 v3,
xeon e7 8870 v4,
xeon e7 8880 v2,
xeon e7 8880 v3,
xeon e7 8880 v4,
xeon e7 8880l v2,
xeon e7 8880l v3,
xeon e7 8890 v2,
xeon e7 8890 v3,
xeon e7 8890 v4,
xeon e7 8891 v2,
xeon e7 8891 v3,
xeon e7 8891 v4,
xeon e7 8893 v2,
xeon e7 8893 v3,
xeon e7 8893 v4,
xeon e7 8894 v4,
xeon e7520,
xeon e7530,
xeon e7540,
xeon ec5509,
xeon ec5539,
xeon ec5549,
xeon gold 5115,
xeon gold 5118,
xeon gold 5119t,
xeon gold 5120,
xeon gold 5120t,
xeon gold 5122,
xeon gold 6126,
xeon gold 6126f,
xeon gold 6126t,
xeon gold 6128,
xeon gold 6130,
xeon gold 6130f,
xeon gold 6130t,
xeon gold 6132,
xeon gold 6134,
xeon gold 6134m,
xeon gold 6136,
xeon gold 6138,
xeon gold 6138f,
xeon gold 6138t,
xeon gold 6140,
xeon gold 6140m,
xeon gold 6142,
xeon gold 6142f,
xeon gold 6142m,
xeon gold 6144,
xeon gold 6146,
xeon gold 6148,
xeon gold 6148f,
xeon gold 6150,
xeon gold 6152,
xeon gold 6154,
xeon l3406,
xeon l3426,
xeon l5506,
xeon l5508,
xeon l5518,
xeon l5520,
xeon l5530,
xeon l5609,
xeon l5618,
xeon l5630,
xeon l5638,
xeon l5640,
xeon l7545,
xeon l7555,
xeon lc5518,
xeon lc5528,
xeon phi 7210,
xeon phi 7210f,
xeon phi 7230,
xeon phi 7230f,
xeon phi 7235,
xeon phi 7250,
xeon phi 7250f,
xeon phi 7285,
xeon phi 7290,
xeon phi 7290f,
xeon phi 7295,
xeon platinum 8153,
xeon platinum 8156,
xeon platinum 8158,
xeon platinum 8160,
xeon platinum 8160f,
xeon platinum 8160m,
xeon platinum 8160t,
xeon platinum 8164,
xeon platinum 8168,
xeon platinum 8170,
xeon platinum 8170m,
xeon platinum 8176,
xeon platinum 8176f,
xeon platinum 8176m,
xeon platinum 8180,
xeon silver 4108,
xeon silver 4109t,
xeon silver 4110,
xeon silver 4112,
xeon silver 4114,
xeon silver 4114t,
xeon silver 4116,
xeon silver 4116t,
xeon w3670,
xeon w3680,
xeon w3690,
xeon w5580,
xeon w5590,
xeon x3430,
xeon x3440,
xeon x3450,
xeon x3460,
xeon x3470,
xeon x3480,
xeon x5550,
xeon x5560,
xeon x5570,
xeon x5647,
xeon x5650,
xeon x5660,
xeon x5667,
xeon x5670,
xeon x5672,
xeon x5675,
xeon x5677,
xeon x5680,
xeon x5687,
xeon x5690,
xeon x6550,
xeon x7542,
xeon x7550,
xeon x7560

References

Canonical

CVE-2018-9056 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9056)

Miscellaneous

http://www.cs.ucr.edu/~nael/pubs/asplos18.pdf

https://arstechnica.com/gadgets/2018/03/its-not-just-spectre-researchers-reveal-more-branch-prediction-attacks

Additional Info

Authenticated

Unknown

Exploitable

Unknown

Reliability

Unknown

Stability

Unknown

Available Mitigations

Unknown

Shelf Life

Unknown

Userbase/Installbase

Unknown

Patch Effectiveness

Unknown

Rapid7

Technical Analysis

Report as Emergent Threat Response

Please provide the link to the ETR blog if available.

Add a reference URL (optional):

Report as Zero-day Exploit

Please provide the link to the zero-day exploit reference.

Note: The source link you provide will create a new misc reference if it doesn't already exist.

Add a reference URL (optional):

Report as Exploited in the Wild

AttackerKB users want to know this is information they can trust.
Help the community by indicating the source(s) of your knowledge:

Vendor Advisory

Add a reference URL (required):

Please provide a link to the Vendor Advisory.
Government or Industry Alert

Add a reference URL (required):

Please provide a link to the Government or Industry Alert.
Threat Feed

Add a reference URL (required):

Please provide a link to the Threat Feed.
News Article or Blog

Add a reference URL (required):

Please provide a link to the News Reference.
Exploitation personally observed in an environment (client, customer, employer, or personal environment)

Add a reference URL (required):

Please provide a link or create an assessment as evidence to support your personal observation claim.
Other:

Please explain the source of your report.

Add a reference URL (required):

Please provide a link or create an assessment as evidence of the source of your report.

CVE ID

AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:

CVE ID:

Unknown

CVE-2018-9056

Unknown

Unknown

Unknown

Unknown

Unknown

CVE-2018-9056

Description

Add Assessment

CVSS V3 Severity and Metrics

General Information

Vendors

Products

References

Canonical

Miscellaneous

Additional Info

Technical Analysis

Quick Cookie Notification