{"id":"CVE-2017-5715","published":"2018-01-04T13:00:00Z","modified":"2025-05-06T14:59:36Z","title":"Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized…","vendor":"Intel Corporation","product":"Microprocessors with Speculative Execution","tier":"core","eol":null,"affectedVersions":[{"vendor":"Intel Corporation","product":"Microprocessors with Speculative Execution","versions":["All"]}],"description":{"text":"Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.","provenance":"source","from":"CVE.org"},"summary":{"text":"Intel microprocessors with speculative execution and indirect branch prediction contain a side-channel flaw in the processor microarchitecture. An attacker with local user access and no user interaction can perform side-channel analysis to obtain unauthorized disclosure of information.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:13:01Z"},"cvss":{"score":5.6,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.73249,"percentile":0.99457,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":7,"pulses":[{"name":"ripe.arin.enom.cpanel.cpcalendar.iana.networksolutions.02050.webdisk.webmail.","url":"https://otx.alienvault.com/pulse/69fdc02bea1e4ec923b01688","created":"2026-05-08"},{"name":"Spam “Broken Seal” DocuSign-themed Delivery w/Fileless Process Hollowing (Zeppelin/Bloat-A) by msudosos","url":"https://otx.alienvault.com/pulse/69bf64eccb5d39a90a3c391e","created":"2026-03-22"},{"name":"Spam “Broken Seal” DocuSign-themed Delivery w/Fileless Process Hollowing (Zeppelin/Bloat-A) by msudosos","url":"https://otx.alienvault.com/pulse/69bf64e1d5e06aa6207f78de","created":"2026-03-22"},{"name":"TTB-Chained (Tehran-Transversal Belasco Chain)","url":"https://otx.alienvault.com/pulse/69a82c53aae1e6d8b8213ff9","created":"2026-03-04"},{"name":"The Belasco Chain","url":"https://otx.alienvault.com/pulse/69a02837827feb0b78fa3ad2","created":"2026-02-26"},{"name":"CVE Data","url":"https://otx.alienvault.com/pulse/69929b597293fe5837b9c95c","created":"2026-02-16"},{"name":"“Broken Seal” DocuSign-themed Delivery with Fileless Process Hollowing (Zeppelin/Bloat-A)","url":"https://otx.alienvault.com/pulse/698e93e1ab02db8c49e8c3ed","created":"2026-02-13"}],"provenance":"machine"},"cwes":[{"id":"CWE-203","name":"Observable Discrepancy"}],"references":[{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4609","tags":["x_refsource_CONFIRM"]},{"url":"https://usn.ubuntu.com/3560-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://www.debian.org/security/2018/dsa-4187","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"https://usn.ubuntu.com/3542-2/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://security.gentoo.org/glsa/201810-06","tags":["vendor-advisory","x_refsource_GENTOO"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","tags":["x_refsource_CONFIRM"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","tags":["x_refsource_CONFIRM"]},{"url":"https://usn.ubuntu.com/3540-2/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://access.redhat.com/security/vulnerabilities/speculativeexecution","tags":["x_refsource_CONFIRM"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002","tags":["x_refsource_CONFIRM"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://usn.ubuntu.com/3597-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4611","tags":["x_refsource_CONFIRM"]},{"url":"https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html","tags":["x_refsource_MISC"]},{"url":"https://www.debian.org/security/2018/dsa-4213","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"https://cert.vde.com/en-us/advisories/vde-2018-002","tags":["x_refsource_CONFIRM"]},{"url":"https://www.debian.org/security/2018/dsa-4120","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00009.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://usn.ubuntu.com/3580-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://support.f5.com/csp/article/K91229003","tags":["x_refsource_CONFIRM"]},{"url":"https://usn.ubuntu.com/3531-3/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://usn.ubuntu.com/3620-2/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://usn.ubuntu.com/3582-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://www.debian.org/security/2018/dsa-4188","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0292","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://xenbits.xen.org/xsa/advisory-254.html","tags":["x_refsource_CONFIRM"]},{"url":"https://security.netapp.com/advisory/ntap-20180104-0001/","tags":["x_refsource_CONFIRM"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00012.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://www.synology.com/support/security/Synology_SA_18_01","tags":["x_refsource_CONFIRM"]},{"url":"http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html","tags":["x_refsource_MISC"]},{"url":"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/102376","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability","tags":["x_refsource_CONFIRM"]},{"url":"https://usn.ubuntu.com/3594-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"http://www.kb.cert.org/vuls/id/584653","tags":["third-party-advisory","x_refsource_CERT-VN"]},{"url":"https://www.kb.cert.org/vuls/id/180049","tags":["third-party-advisory","x_refsource_CERT-VN"]},{"url":"https://cert.vde.com/en-us/advisories/vde-2018-003","tags":["x_refsource_CONFIRM"]},{"url":"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes","tags":["x_refsource_CONFIRM"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00005.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://usn.ubuntu.com/3690-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_us","tags":["x_refsource_CONFIRM"]},{"url":"https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0001","tags":["x_refsource_CONFIRM"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03871en_us","tags":["x_refsource_CONFIRM"]},{"url":"https://www.vmware.com/us/security/advisories/VMSA-2018-0004.html","tags":["x_refsource_CONFIRM"]},{"url":"https://usn.ubuntu.com/3549-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00003.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/","tags":["x_refsource_CONFIRM"]},{"url":"https://support.citrix.com/article/CTX231399","tags":["x_refsource_CONFIRM"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","tags":["x_refsource_CONFIRM"]},{"url":"https://spectreattack.com/","tags":["x_refsource_MISC"]},{"url":"https://usn.ubuntu.com/3531-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-18:03.speculative_execution.asc","tags":["vendor-advisory","x_refsource_FREEBSD"]},{"url":"https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/","tags":["x_refsource_CONFIRM"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00002.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://usn.ubuntu.com/3581-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securitytracker.com/id/1040071","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088&languageid=en-fr","tags":["x_refsource_CONFIRM"]},{"url":"https://usn.ubuntu.com/3597-2/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://usn.ubuntu.com/3581-2/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4614","tags":["x_refsource_CONFIRM"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel","tags":["vendor-advisory","x_refsource_CISCO"]},{"url":"https://usn.ubuntu.com/usn/usn-3516-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://www.vmware.com/us/security/advisories/VMSA-2018-0002.html","tags":["x_refsource_CONFIRM"]},{"url":"https://www.exploit-db.com/exploits/43427/","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00013.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://usn.ubuntu.com/3541-2/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html","tags":["x_refsource_MISC"]},{"url":"https://support.lenovo.com/us/en/solutions/LEN-18282","tags":["x_refsource_CONFIRM"]},{"url":"https://usn.ubuntu.com/3777-3/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://www.vmware.com/security/advisories/VMSA-2018-0007.html","tags":["x_refsource_CONFIRM"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00004.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4613","tags":["x_refsource_CONFIRM"]},{"url":"https://usn.ubuntu.com/3561-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://usn.ubuntu.com/3582-2/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://seclists.org/bugtraq/2019/Jun/36","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt","tags":["x_refsource_CONFIRM"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","tags":["x_refsource_MISC"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf","tags":["x_refsource_CONFIRM"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc","tags":["vendor-advisory","x_refsource_FREEBSD"]},{"url":"https://seclists.org/bugtraq/2019/Nov/16","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html","tags":["x_refsource_MISC"]},{"url":"https://security.paloaltonetworks.com/CVE-2017-5715","tags":["x_refsource_CONFIRM"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/03/msg00025.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/08/msg00019.html","tags":["mailing-list","x_refsource_MLIST"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2017-14792","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-14792","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":43427,"url":"https://www.exploit-db.com/exploits/43427","title":"Multiple CPUs - 'Spectre' Information Disclosure","type":"local","platform":"multiple","date":"2018-01-03","verified":false,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2018-01-03"},"pocGithub":{"count":4,"skipped":1,"earliest":"2018-01-09","earliestUrl":"https://github.com/opsxcq/exploit-cve-2017-5715","repos":[{"name":"opsxcq/exploit-cve-2017-5715","url":"https://github.com/opsxcq/exploit-cve-2017-5715","stars":54,"created":"2018-01-09"},{"name":"mathse/meltdown-spectre-bios-list","url":"https://github.com/mathse/meltdown-spectre-bios-list","stars":17,"created":"2018-01-14"},{"name":"GregAskew/SpeculativeExecutionAssessment","url":"https://github.com/GregAskew/SpeculativeExecutionAssessment","stars":0,"created":"2018-01-15"},{"name":"iamshivambhatt/Hardware-Vulnerability-with-Proof-of-Concept-","url":"https://github.com/iamshivambhatt/Hardware-Vulnerability-with-Proof-of-Concept-","stars":0,"created":"2026-07-05"}]},"first":{"date":"2018-01-03","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/43427"},"provenance":"source"},"exploitRefs":["https://www.exploit-db.com/exploits/43427/","http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html","http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html"],"flow":[],"timeline":[{"date":"2018-01-03","kind":"exploit-public","label":"First public exploit: Exploit-DB (EDB-43427); later: PoC-in-GitHub 2018-01-09","url":"https://www.exploit-db.com/exploits/43427","provenance":"source"},{"date":"2018-01-04","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2017-5715","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Exploit-DB","daysToKev":null},"priority":{"score":30.9,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.89,"detail":"percentile 0.9946"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD reference tagged Exploit; 1 Exploit-DB entry; 2 NVD exploit links; 4 PoC-in-GitHub repos"},{"name":"Mentioned in OTX pulses","points":2.05,"detail":"7 pulses"},{"name":"CVSS severity","points":3.92,"detail":"base score 5.6"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}