mitel micloud-management-portal CVE-2018-3639 vulnerability in Mitel and Other Products
Published on May 22, 2018

product logo product logo product logo product logo product logo product logo product logo product logo product logo product logo product logo product logo
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD

Vulnerability Analysis

CVE-2018-3639 can be exploited with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
NONE
Availability Impact:
NONE

Weakness Type

What is a Side Channel Attack Vulnerability?

The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not. Discrepancies can take many forms, and variations may be detectable in timing, control flow, communications such as replies or requests, or general behavior. These discrepancies can reveal information about the product's operation or internal state to an unauthorized actor. In some cases, discrepancies can be used by attackers to form a side channel.

CVE-2018-3639 has been classified to as a Side Channel Attack vulnerability or weakness.


Products Associated with CVE-2018-3639

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2018-3639 are published in these products:

Mitel Micloud Management Portal
 
Mitel Micollab
 
Mitel Mivoice 5000
 
Mitel Mivoice Border Gateway
 
Mitel Mivoice Business
 
Mitel Mivoice Connect
 
Mitel Mivoic Mx One
 
Mitel Open Integration Gateway
 
Red Hat Openstack
 
Schneider Electric Struxureware Data Center Expert
 
SonicWall Cloud Global Management System
 
SonicWall Email Security
 
SonicWall Global Management System
 
SonicWall Secure Mobile Access
 
SonicWall Sonicosv
 
SonicWall Web Application Firewall
 
Arm Cortex A
 
Intel Atom C
 
Intel Atom E
 
Intel Atom Z
 
Intel Celeron J
 
Intel Celeron N
 
Intel Core I3
 
Intel Core i5 Processor
 
Intel Core i7 Processor
 
Intel Core M
 
Intel Pentium
 
Intel Pentium J
 
Intel Pentium Silver
 
Intel Xeon E 1105c
 
Intel Xeon E3
 
Intel Xeon E3 1105c V2
 
Intel Xeon E3 1125c V2
 
Intel Xeon E3 12201
 
Intel Xeon E3 12201 V2
 
Intel Xeon E3 1220l V3
 
Intel Xeon E3 1220 V2
 
Intel Xeon E3 1220 V3
 
Intel Xeon E3 1220 V5
 
Intel Xeon E3 1220 V6
 
Intel Xeon E3 1225
 
Intel Xeon E3 1225 V2
 
Intel Xeon E3 1225 V3
 
Intel Xeon E3 1225 V5
 
Intel Xeon E3 1225 V6
 
Intel Xeon E3 1226 V3
 
Intel Xeon E3 1230
 
Intel Xeon E3 1230l V3
 
Intel Xeon E3 1230 V2
 
Intel Xeon E3 1230 V3
 
Intel Xeon E3 1230 V5
 
Intel Xeon E3 1230 V6
 
Intel Xeon E3 1231 V3
 
Intel Xeon E3 1235
 
Intel Xeon E3 1235l V5
 
Intel Xeon E3 1240
 
Intel Xeon E3 1240l V3
 
Intel Xeon E3 1240l V5
 
Intel Xeon E3 1240 V2
 
Intel Xeon E3 1240 V3
 
Intel Xeon E3 1240 V5
 
Intel Xeon E3 1240 V6
 
Intel Xeon E3 1241 V3
 
Intel Xeon E3 1245
 
Intel Xeon E3 1245 V2
 
Intel Xeon E3 1245 V3
 
Intel Xeon E3 1245 V5
 
Intel Xeon E3 1245 V6
 
Intel Xeon E3 1246 V3
 
Intel Xeon E3 1258l V4
 
Intel Xeon E3 1260l
 
Intel Xeon E3 1260l V5
 
Intel Xeon E3 1265l V2
 
Intel Xeon E3 1265l V3
 
Intel Xeon E3 1265l V4
 
Intel Xeon E3 1268l V3
 
Intel Xeon E3 1268l V5
 
Intel Xeon E3 1270
 
Intel Xeon E3 1270 V2
 
Intel Xeon E3 1270 V3
 
Intel Xeon E3 1270 V5
 
Intel Xeon E3 1270 V6
 
Intel Xeon E3 1271 V3
 
Intel Xeon E3 1275l V3
 
Intel Xeon E3 1275 V2
 
Intel Xeon E3 1275 V3
 
Intel Xeon E3 1275 V5
 
Intel Xeon E3 1275 V6
 
Intel Xeon E3 1276 V3
 
Intel Xeon E3 1278l V4
 
Intel Xeon E3 1280
 
Intel Xeon E3 1280 V2
 
Intel Xeon E3 1280 V3
 
Intel Xeon E3 1280 V5
 
Intel Xeon E3 1280 V6
 
Intel Xeon E3 1281 V3
 
Intel Xeon E3 1285l V3
 
Intel Xeon E3 1285l V4
 
Intel Xeon E3 1285 V3
 
Intel Xeon E3 1285 V4
 
Intel Xeon E3 1285 V6
 
Intel Xeon E3 1286l V3
 
Intel Xeon E3 1286 V3
 
Intel Xeon E3 1290
 
Intel Xeon E3 1290 V2
 
Intel Xeon E3 1501l V6
 
Intel Xeon E3 1501m V6
 
Intel Xeon E3 1505l V5
 
Intel Xeon E3 1505l V6
 
Intel Xeon E3 1505m V5
 
Intel Xeon E5
 
Intel Xeon E5 1428l
 
Intel Xeon E5 1428l V2
 
Intel Xeon E5 1428l V3
 
Intel Xeon E5 1620
 
Intel Xeon E5 1620 V2
 
Intel Xeon E5 1620 V3
 
Intel Xeon E5 1620 V4
 
Intel Xeon E5 1630 V3
 
Intel Xeon E5 1630 V4
 
Intel Xeon E5 1650
 
Intel Xeon E5 1650 V2
 
Intel Xeon E5 1650 V3
 
Intel Xeon E5 1650 V4
 
Intel Xeon E5 1660
 
Intel Xeon E5 1660 V2
 
Intel Xeon E5 1660 V3
 
Intel Xeon E5 1660 V4
 
Intel Xeon E5 1680 V3
 
Intel Xeon E5 1680 V4
 
Intel Xeon E5 2403
 
Intel Xeon E5 2403 V2
 
Intel Xeon E5 2407
 
Intel Xeon E5 2407 V2
 
Intel Xeon E5 2408l V3
 
Intel Xeon E5 2418l
 
Intel Xeon E5 2418l V2
 
Intel Xeon E5 2418l V3
 
Intel Xeon E5 2420
 
Intel Xeon E5 2420 V2
 
Intel Xeon E5 2428l
 
Intel Xeon E5 2428l V2
 
Intel Xeon E5 2428l V3
 
Intel Xeon E5 2430
 
Intel Xeon E5 2430l
 
Intel Xeon E5 2430l V2
 
Intel Xeon E5 2430 V2
 
Intel Xeon E5 2438l V3
 
Intel Xeon E5 2440
 
Intel Xeon E5 2440 V2
 
Intel Xeon E5 2448l
 
Intel Xeon E5 2448l V2
 
Intel Xeon E5 2450
 
Intel Xeon E5 2450l
 
Intel Xeon E5 2450l V2
 
Intel Xeon E5 2450 V2
 
Intel Xeon E5 2470
 
Intel Xeon E5 2470 V2
 
Intel Xeon E5 2603
 
Intel Xeon E5 2603 V2
 
Intel Xeon E5 2603 V3
 
Intel Xeon E5 2603 V4
 
Intel Xeon E5 2608l V3
 
Intel Xeon E5 2608l V4
 
Intel Xeon E5 2609
 
Intel Xeon E5 2609 V2
 
Intel Xeon E5 2609 V3
 
Intel Xeon E5 2609 V4
 
Intel Xeon E5 2618l V2
 
Intel Xeon E5 2618l V3
 
Intel Xeon E5 2618l V4
 
Intel Xeon E5 2620
 
Intel Xeon E5 2620 V2
 
Intel Xeon E5 2620 V3
 
Intel Xeon E5 2620 V4
 
Intel Xeon E5 2623 V3
 
Intel Xeon E5 2623 V4
 
Intel Xeon E5 2628l V2
 
Intel Xeon E5 2628l V3
 
Intel Xeon E5 2628l V4
 
Intel Xeon E5 2630
 
Intel Xeon E5 2630l
 
Intel Xeon E5 2630l V2
 
Intel Xeon E5 2630l V3
 
Intel Xeon E5 2630l V4
 
Intel Xeon E5 2630 V2
 
Intel Xeon E5 2630 V3
 
Intel Xeon E5 2630 V4
 
Intel Xeon E5 2637
 
Intel Xeon E5 2637 V2
 
Intel Xeon E5 2637 V3
 
Intel Xeon E5 2637 V4
 
Intel Xeon E5 2640
 
Intel Xeon E5 2640 V2
 
Intel Xeon E5 2640 V3
 
Intel Xeon E5 2640 V4
 
Intel Xeon E5 2643
 
Intel Xeon E5 2643 V2
 
Intel Xeon E5 2643 V3
 
Intel Xeon E5 2643 V4
 
Intel Xeon E5 2648l
 
Intel Xeon E5 2648l V2
 
Intel Xeon E5 2648l V3
 
Intel Xeon E5 2648l V4
 
Intel Xeon E5 2650
 
Intel Xeon E5 2650l
 
Intel Xeon E5 2650l V2
 
Intel Xeon E5 2650l V3
 
Intel Xeon E5 2650 V2
 
Intel Xeon E5 2650 V3
 
Intel Xeon E5 2650 V4
 
Intel Xeon E7
 
Intel Xeon Gold
 
Intel Xeon Platinum
 
Intel Xeon Silver
 
Canonical Ubuntu Linux
 
Debian Linux
 
Oracle Solaris
 
Red Hat Enterprise Linux Desktop
 
Red Hat Enterprise Linux Server
 
Red Hat Enterprise Linux Server Aus
 
Red Hat Enterprise Linux Server Eus
 
Red Hat Enterprise Linux Server Tus
 
Red Hat Enterprise Linux Workstation
 
Red Hat Virtualization
 
Intel Atom X5 E3930
 
Intel Atom X5 E3940
 
Intel Atom X7 E3950
 
Red Hat Mrg Realtime
 
Red Hat Virtualization Manager
 
Red Hat Enterprise Linux Eus
 
Oracle Local Service Management System
 
NVIDIA Jetson Tx1
 
NVIDIA Jetson Tx2
 
Microsoft Surface
 
Microsoft Surface Book
 
Microsoft Surface Pro
 
Microsoft Surface Pro With Lte Advanced
 
Microsoft Surface Studio
 
Microsoft Windows 10
 
Microsoft Windows 7
 
Microsoft Windows 8.1
 
Microsoft Windows Server 2008
 
Microsoft Windows Server 2012
 
Microsoft Windows Server 2016
 

Affected Versions

Intel Corporation Multiple Version Multiple is affected by CVE-2018-3639

Exploit Probability

EPSS
46.73%
Percentile
97.73%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.