Get-SpeculationControlSettings not checking for CVE-2017-5753?

Hi all,

Am I missing something here? Get-SpeculationControlSettings seems to check for 2017-5754 (Meltdown) and 2017-5715 (one part of Spectre) but not CVE-2017-5753 (the other part of spectre).

I've gotta be misunderstanding something here, right?

Thanks in advance!

EdTittel said:

AFAIK the two CVEs that Get-SpeculationControls checks for are the ones you mentioned. To the best of my knowledge that tool does not check for 5753 at all. Never seen any mention of that in discussions of the tool or the remediation of those vulnerabilities.
HTH,
--Ed--

I think I have an answer, if it's helpful. It came from another forum, but I wanted to share it in case it's useful:

"

The main goal of this PowerShell script, is not to test if your CPU is vulnerable or to test if the patches have been installed. The main goal is to check if the mitigations are active.

The mitigations for CVE-2017-5754 and CVE-2017-5715 are configurable (can be enabled or disabled via registry: https://support.microsoft.com/en-za/...tive-execution), and mitigating CVE-2017-5715 requires a microcode update.

The mitigation for CVE-2017-5753 is not configurable, and does not require a microcode update.

If the Windows patch for Meltdown/Spectre has been installed on your machine, then mitigation for CVE-2017-5753 is active.

https://support.microsoft.com/en-za/help/4074629/understanding-the-output-of-get-speculationcontrolsettings-powershell"