Vulnerability identifier: #VU9884

Vulnerability risk: Low

CVSSv3.1: 6.2 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:H/RL:O/RC:C]

CVE-ID: CVE-2017-5753

CWE-ID: CWE-200

Exploitation vector: Local

Exploits in database: 7

• September 1, 2020
  • Meltdown-Spectre (Meltdown & Spectre - catastrophic vulnerabilities - exploited ?️) [Github]
• April 7, 2020
  • PoC (PoC of CVE/Exploit) [Github]
• March 18, 2020
  • spectre-attack (Example of using revealed "Spectre" exploit (CVE-2017-5753 and CVE-2017-5715)) [Github]
  • spectreScope (The demo of the speculative execution attack Spectre (CVE-2017-5753, CVE-2017-5715).) [Github]
  • CiscoSpectreTakeover (A POC chain exploit using the recent Cisco SMP exploit (CVE-2017-6736) to chain into Spectre (CVE-2017-5753 and CVE-2017-5715)) [Github]
  • spectre-attack-demo (Example of using revealed "Spectre" exploit (CVE-2017-5753 and CVE-2017-5715)) [Github]
  • cve-2017-5753 (OSX 10.13.2, CVE-2017-5753, Spectre, PoC, C, ASM for OSX, MAC, Intel Arch, Proof of Concept, Hopper.App Output) [Github]

Impact: Information disclosure

Vulnerable software:
Intel CPU
Hardware solutions / Firmware

Vendor: Intel