CSCvh51582 - Evaluation of c800 for CPU Side-Channel Information Disclosure Vulnerabi

[jm777]

Hi All, 

Trying to determine if some of my assets are vulnerable. I have two main questions.. 

Regarding the known affected releases, is it just version 15.7(3.1b)M? Or is it 15.7(3.1b)M and everything prior to that release? I'm also wondering how I can determine if I am utilizing IOx application's on my assets. 

Thanks in advance! 

[Leo Laohoo]

Intel is dragging their feet.  Intel is refusing (too hard basket) to release the fix for Meltdown and Spectre (read THIS) to some of their old chips.  

As of 01 April 2018, no one has reported or heard of any exploits for these vulnerabilities.  

If your network is US Defense related then you need to talk to your AM/SE.