Ilya Alexandrovich

Name of the Vulnerable Software and Affected Versions: Intel(R) Processors with Intel(R) SGX (affected versions not specified) Description: The issue is related to an improper conditions check in the implementation of Intel's Software Guard eXtensions (SGX) technology. This could allow a privileged user to potentially enable information disclosure via local access. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to observable behavioral power management throttling and errors in the dynamic frequency adjustment process of Intel processor microcode, specifically concerning Dynamic Voltage and Frequency Scaling (DVFS) technology. This may allow an authenticated user or a remote attacker to potentially enable information disclosure via network access or side-channel attacks.

The issue is related to the implementation of the JTAG interface in Intel microprogram software, which is associated with insufficient boundaries of the controlled system area. This may allow an unauthorized user to potentially enable information disclosure via physical access to sensitive information by physically probing the JTAG interface for some Intel Processors with SGX.