Spectre and Meltdown attacks impact on FSense processor.

FDU

What is your assessment of FSense processor vulnerability to Spectre (Bounds check bypass/CVE-2017-5753 and Branch target injection/CVE-2017-5715) and Meltdown (Rogue data cache load, memory access permission check performed after kernel memory read/CVE-2017-5754) attacks and what is your litigation plan as the case may be ?

Coffeebreak

I would also like to know what is the situation with Sense router and Meltdown/Spectre before I buy the product.

Ben

According to our hardware partner the processor in the F-Secure SENSE router is not affected by Spectre and Meltdown. In addition, the SENSE router is only running code provided by F-Secure.

So, we believe F-Secure SENSE is not affected by Meltdown and Spectre attacks.

 

Computers, smartphones and tablets running Android, MacOS, iOS, and Windows are affected by the attacks. We advise users to update their devices as soon as an operating system update is available.

EDIT :Updated information.

Coffeebreak

Hi,

 

this answer satisfied my needs. Bought one  and now installing

 

Thanks for the help.

FDU

The fact that FSense is running code done by Fsecure is not providing any assurance that the router chip is immune to these Spectre/Meltdown 3 vulnerabilities as these are solely due to the hardware implementation in the MPU.

Of course, the fact that you do the software can give you some possibilities to provide some patches / workaround solutions but not to say that the processor is immune to the 3 vulnerabilities reported in Spectre/Meltdown.

From your answer, I then guess that, contrary to many other routers processors, the processor that you are using in FSense, although most probably also based on Arm cores, is not in the list published by ARM, right ?

https://developer.arm.com/support/security-update

FS_Simo

The F-Secure SENSE CPU is running on MIPS architecture. According to our current information this particular CPU variant is not vulnerable to these attacks.