--- title: Security Advisory Foreshadow Vulnerabilities | Speakerbus description: We have identified three securities flaws that affect Intel processors. Learn about the best practices we use to remove these vulnerabilities. image: https://www.speakerbus.com/hubfs/cve-foreshadow-.jpg --- [![SPEAKERBUS-LOGO](https://www.speakerbus.com/hubfs/SPEAKERBUS-LOGO.svg "SPEAKERBUS-LOGO")](https://www.speakerbus.com/) [Contact Us](https://www.speakerbus.com/contact-us) [Support Hub](https://www.speakerbus.com/support-hub) [Resources](https://www.speakerbus.com/resources) [solutions](https://www.speakerbus.com/solutions) [Solutions](https://www.speakerbus.com/solutions) [QORUS Critical communications software, applications and devices](https://www.speakerbus.com/qorus) [Cadence Cloud-based platform for critical communications](https://www.speakerbus.com/cadence) [About Us](https://www.speakerbus.com/about-us) [Meet the Team](https://www.speakerbus.com/team) [Who we Serve](https://www.speakerbus.com/who-we-serve) [Partners](https://www.speakerbus.com/partner-network) [Blog](https://www.speakerbus.com/blog) # Security Advisory - Foreshadow Vulnerabilities & Best Practices 26/09/2018 [  - Article](https://www.speakerbus.com/blog/tag/article) [By Timothy Game](https://www.speakerbus.com/blog/author/tim-game) Chief Technology Officer ![Security Advisory - Foreshadow Vulnerabilities & Best Practices](https://www.speakerbus.com/hubfs/cve-foreshadow-.jpg) We outline details about Foreshadow vulnerabilities, including security flaws identified, what we're doing to combat them, risk level and recommendations. --- **Updated - 20th September 2018** ## Overview of the Foreshadow vulnerabilities Three related security flaws have been identified which affect Intel processors. These are known as [Foreshadow](https://en.wikipedia.org/wiki/Foreshadow) (CVE-2018-3615) and Foreshadow-NG (CVE-2018-3620, CVE-2018-3646) ### Risk level **The risk of exploitation in a Speakerbus solution is assessed as low.** [Speakerbus](https://www.speakerbus.com/) confirm that any Server products could have some level of exposure to the vulnerabilities. Those installed on Windows Servers are: - iManager Centralised Management System (iCMS), - iManager Call Data Server (iCDS), - SB 534 GA Server and System Controllers - Voice Conference Manager (VCM) products. - ARIA iManager Web Server (iWS) ### Tests and recommendations  Speakerbus have tested the Microsoft patches for Windows Server 2008 (KB4343900) and Windows Server 2012 (KB4343898) for all the relevant above-listed products. We recommend that they are applied to ensure the continued security of the servers. Those installed on CentOS / Red Hat Servers are: - iManager Communication Server (iCS) - iManager Gateway Server (iGS) - ARIA iManager CloudBase (iCB) We are currently updating the iCS, iGS and iCB to remove this vulnerability in our upcoming software releases to be made available during Q4 2018. ## Additional questions More information on the vulnerabilities can be found at: [https://foreshadowattack.eu/](https://foreshadowattack.eu/) For further details, please contact your regional partner or our service desk: [https://www.speakerbus.com/helpdesk/](https://www.speakerbus.com/helpdesk/)   © 2026 - Speakerbus ### NEWSLETTER ## Want to stay up to date ? Join our newsletter today to receive industry-focused news and updates on all our latest offerings. ## Related News Stay up-to-date with the latest news [READ ALL](https://www.speakerbus.com/blog) [![QORUS Release Highlights - Enterprise Release 11 - 2025](https://www.speakerbus.com/hubfs/speakerbus%20interface-1.png)](https://www.speakerbus.com/blog/qorus-release-highlights-enterprise-release-11-2025) [16/06/2025](https://www.speakerbus.com/blog/qorus-release-highlights-enterprise-release-11-2025)[-Article](https://www.speakerbus.com/blog/tag/article) ### [QORUS Release Highlights - Enterprise Release 11 - 2025](https://www.speakerbus.com/blog/qorus-release-highlights-enterprise-release-11-2025) Introduction Speakerbus Technology proudly announces the release of QORUS Enterprise 11. [See more](https://www.speakerbus.com/blog/qorus-release-highlights-enterprise-release-11-2025) [![On-Prem, Cloud, or Hybrid? Why Speakerbus Doesn’t Make You Choose](https://www.speakerbus.com/hubfs/hybrid-on-premise-cloud-trader-voice.png)](https://www.speakerbus.com/blog/on-prem-cloud-or-hybrid-why-speakerbus-doesnt-make-you-choose) [6/05/2025](https://www.speakerbus.com/blog/on-prem-cloud-or-hybrid-why-speakerbus-doesnt-make-you-choose)[-Article](https://www.speakerbus.com/blog/tag/article) ### [On-Prem, Cloud, or Hybrid? Why Speakerbus Doesn’t Make You Choose](https://www.speakerbus.com/blog/on-prem-cloud-or-hybrid-why-speakerbus-doesnt-make-you-choose) When the Cloud isn’t a Magic Bullet As more vendors rush headfirst into cloud-only voice t... [See more](https://www.speakerbus.com/blog/on-prem-cloud-or-hybrid-why-speakerbus-doesnt-make-you-choose) [![Communicating During a Cyber Attack: The Role of an Internal Hoot Network](https://www.speakerbus.com/hubfs/communicating-during-crisis.png)](https://www.speakerbus.com/blog/communicating-during-a-cyber-attack-the-role-of-an-internal-hoot-network) [5/03/2025](https://www.speakerbus.com/blog/communicating-during-a-cyber-attack-the-role-of-an-internal-hoot-network)[-Article](https://www.speakerbus.com/blog/tag/article) ### [Communicating During a Cyber Attack: The Role of an Internal Hoot Network](https://www.speakerbus.com/blog/communicating-during-a-cyber-attack-the-role-of-an-internal-hoot-network) Introduction: The Rising Threat of Cyber Attacks Worldwide, cybercrime cost companies an e... [See more](https://www.speakerbus.com/blog/communicating-during-a-cyber-attack-the-role-of-an-internal-hoot-network) [![SPEAKERBUS-LOGO](https://www.speakerbus.com/hubfs/SPEAKERBUS-LOGO.svg)](https://www.speakerbus.com) [**Solutions**](https://www.speakerbus.com/solutions) [Qorus](https://www.speakerbus.com/qorus) [Cadence](https://www.speakerbus.com/cadence) [About us](https://www.speakerbus.com/about-us) [Meet the Team](https://www.speakerbus.com/team) [Careers](https://www.speakerbus.com/careers) [Contact us](https://www.speakerbus.com/contact-us) [![X Platform](https://www.speakerbus.com/hubfs/X%20Platform.svg)](https://twitter.com/speakerbus) [![linkedin](https://www.speakerbus.com/hubfs/linkedin.svg)](https://www.linkedin.com/company/speakerbus/) [![youtube-sb](https://www.speakerbus.com/hubfs/youtube-sb.svg)](https://www.youtube.com/user/SpeakerbusTech) © 2026 - Speakerbus [Terms and Conditions](https://www.speakerbus.com/legal#cadencetc) [Privacy Policy](https://www.speakerbus.com/legal#privacy) [Cookie Policy](https://www.speakerbus.com/legal#privacy) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Timothy Game", "url" : "https://www.speakerbus.com/blog/author/tim-game" }, "dateModified" : "2023-01-19T11:45:12.477Z", "datePublished" : "2018-09-26T07:32:32.000Z", "headline" : "Security Advisory Foreshadow Vulnerabilities | Speakerbus", "image" : [ "https://www.speakerbus.com/hubfs/cve-foreshadow-.jpg" ], "mainEntityOfPage" : { "@id" : "https://www.speakerbus.com/blog/2018/09/security-advisory-foreshadow-vulnerabilities-cve-2018-3615-cve-2018-3620-and-cve-2018-3646", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject" }, "name" : "Speakerbus Group Plc" } } ```