Meltdown and Spectre (VN 2018-001 & VN 2018-002)

[Drew_C]

Hello everyone!
Extreme has published Vulnerability Notices to provide information on two issues known as Meltdown and Spectre.

VN 2018-001 (CVE-2017-5715, CVE-2017-5753 - Spectre)
VN 2018-002 (CVE-2017-5754 - Meltdown)

At this time, susceptibility to each of these issues is actively being investigated and there isn't much content in either VN. We will continue to update them (and this topic) as more information becomes available.

You can read more about these two attacks on the CERT website: https://www.kb.cert.org/vuls/id/584653

[Steven_Lin]

Thanks for your update Drew! My customer was happy because no impact to his Extreme product

[Drew_C]

I've updated both of these VNs with preliminary information. Links above in the original post.

[Bin]

Hi Drew,
Thank you so much for your reply.

Best regards

[Drew_C]

The information that I was provided didn't have that section filled in and I wanted to get it published. We'll update it as everything continues to come together. There's a lot of people looking at this issue, both internally and externally.

[Bin]

Hi Drew,
Thank you so much for your update.

Do we have any reason why we leave cell empty on "Meltdown Vulnerability Present" of ExtremeWireless and ExtremeWireless WiNG only?

Best regards