Advisory on Intel CPU Vulnerabilities

Information disclosure in Intel processors

Intel recently disclosed multiple vulnerabilities in its computer processor microarchitecture. The vulnerabilities may allow local and authenticated attackers to access sensitive information.

The following are the vulnerabilities found in affected Intel CPU models:

CVE ID	Summary
CVE-2024-28956	Locally authenticated users may exfiltrate sensitive information through “Indirect Target Selection.”
CVE-2024-43420 CVE-2025-20623 CVE-2024-45332	Locally authenticated users may exfiltrate sensitive information through “Branch Privilege Injection.”

CVE-2024-28956 were reported on May 12, 2025, and CVE-2024-43420, CVE-2025-20623, and CVE-2024-45332 on May 13, 2025. Intel has classified all vulnerabilities as having a Medium severity score with a CVSS score 5.6.

Impacted IONOS Cloud products

Product Ranges	Product	Impacted	Mitigated	Patch Status
Compute Services	Dedicated Core Servers	Yes	No	In Progress
Compute Services	vCPU Servers	Yes	No	In Progress
Compute Services	Cubes	Yes	No	In Progress
Containers	Managed Kubernetes	Yes	No	In Progress
Databases	Managed Databases	Yes	No	In Progress
Data Analytics	Event Streams for Apache Kafka	Yes	No	In Progress
Observability	Logging Service	Yes	No	In Progress
Network Services	Managed Application Load Balancer	Yes	No	In Progress
Network Services	Managed Network Load Balancer	Yes	No	In Progress
Network Services	Managed NAT Gateway	Yes	No	In Progress
Network Services	VPN Gateway	Yes	No	In Progress
Storage & Backup	Network File Storage	Yes	No	In Progress

What action has IONOS Cloud taken to mitigate the severity?

IONOS Cloud is committed to the privacy and security of our customers' data. We are aware of this vulnerability and have already initiated the required steps to mitigate this vulnerability. We are also investigating the exposure and risk of this vulnerability for our customer’s products and instances.

We will provide necessary updates as we learn more.

How can I get help?

If you have further questions or concerns about this vulnerability, contact IONOS Cloud Support.