CVE-2023-28746CWE-1342

CVE-2023-28746

Medium · published March 14, 2024

CVSS v3.1
6.5
EPSS
1%
Percentile
45.0
In the wild
Unconfirmed
What it is

Information exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00546 · 45.0th percentile
Weakness
CWE-1342 · Information Exposure through Microarchitectural State after Transient Execution
Published
2024-03-14T21:15Z
References (16)
http://www.openwall.com/lists/oss-security/2024/03/12/13 · [email protected]https://lists.debian.org/debian-lts-announce/2024/05/msg00003.html · [email protected]https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html · [email protected]https://lists.fedoraproject.org/archives/list/[email protected]/message/EIUICU6CVJUIB6BPJ7P5QTPQR5VOBHFK/ · [email protected]https://lists.fedoraproject.org/archives/list/[email protected]/message/H63LGAQXPEVJOES73U4XK65I6DASOAAG/ · [email protected]https://lists.fedoraproject.org/archives/list/[email protected]/message/ZON4TLXG7TG4A2XZG563JMVTGQW4SF3A/ · [email protected]https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html · [email protected]http://www.openwall.com/lists/oss-security/2024/03/12/13 · af854a3a-2127-422b-91ae-364da2661108http://xenbits.xen.org/xsa/advisory-452.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/05/msg00003.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/[email protected]/message/EIUICU6CVJUIB6BPJ7P5QTPQR5VOBHFK/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/[email protected]/message/H63LGAQXPEVJOES73U4XK65I6DASOAAG/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/[email protected]/message/ZON4TLXG7TG4A2XZG563JMVTGQW4SF3A/ · af854a3a-2127-422b-91ae-364da2661108https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-265688.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 14 MAR 16:45Z
    Information exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processors may allow an…
    cvelistv5