Meltdown and Spectre (VN 2018-001 & VN 2018-002)

[Drew_C]

Hello everyone!
Extreme has published Vulnerability Notices to provide information on two issues known as Meltdown and Spectre.

VN 2018-001 (CVE-2017-5715, CVE-2017-5753 - Spectre)
VN 2018-002 (CVE-2017-5754 - Meltdown)

At this time, susceptibility to each of these issues is actively being investigated and there isn't much content in either VN. We will continue to update them (and this topic) as more information becomes available.

You can read more about these two attacks on the CERT website: https://www.kb.cert.org/vuls/id/584653

[Wesley_Jones]

What is the timeline for updating these vulnerabilities on appliances like Extreme Management Center and NAC?

[Drew_C]

The information on this from various groups is being compiled now. Risk for all of these systems appears to be very low. We'll have better updates soon.

[Bin]

Hello Drew,
Thank you for updating those two notices.