Get-SpeculationControlSettings not checking for CVE-2017-5753?


  1. Posts : 4
    Windows 10 Enterprise 64-bit
       #1

    Get-SpeculationControlSettings not checking for CVE-2017-5753?


    Hi all,

    Am I missing something here? Get-SpeculationControlSettings seems to check for 2017-5754 (Meltdown) and 2017-5715 (one part of Spectre) but not CVE-2017-5753 (the other part of spectre).

    I've gotta be misunderstanding something here, right?

    Thanks in advance!
      My Computer


  2. Posts : 4,224
    Windows 10
       #2

    AFAIK the two CVEs that Get-SpeculationControls checks for are the ones you mentioned. To the best of my knowledge that tool does not check for 5753 at all. Never seen any mention of that in discussions of the tool or the remediation of those vulnerabilities.
    HTH,
    --Ed--
      My Computers


  3. Posts : 4
    Windows 10 Enterprise 64-bit
    Thread Starter
       #3

    EdTittel said:
    AFAIK the two CVEs that Get-SpeculationControls checks for are the ones you mentioned. To the best of my knowledge that tool does not check for 5753 at all. Never seen any mention of that in discussions of the tool or the remediation of those vulnerabilities.
    HTH,
    --Ed--
    I think I have an answer, if it's helpful. It came from another forum, but I wanted to share it in case it's useful:

    "
    The main goal of this PowerShell script, is not to test if your CPU is vulnerable or to test if the patches have been installed. The main goal is to check if the mitigations are active.

    The mitigations for CVE-2017-5754 and CVE-2017-5715 are configurable (can be enabled or disabled via registry: https://support.microsoft.com/en-za/...tive-execution), and mitigating CVE-2017-5715 requires a microcode update.

    The mitigation for CVE-2017-5753 is not configurable, and does not require a microcode update.

    If the Windows patch for Meltdown/Spectre has been installed on your machine, then mitigation for CVE-2017-5753 is active.

    https://support.microsoft.com/en-za/help/4074629/understanding-the-output-of-get-speculationcontrolsettings-powershell"

      My Computer


  4. Posts : 4,224
    Windows 10
       #4

    Very helpful, and a great explanation to share. I learned something both useful and valuable. Thanks!
    --Ed--
      My Computers


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 21:49.
Find Us




Windows 10 Forums