CVE-2018-3652
Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation...
Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon Processor D Family allows a limited physical presence attacker to potentially access platform secrets via debug interfaces.
Attack profile
How easy it is to exploit
- Attack vector
- Physical
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon Processor D Family allows a limited physical presence attacker to potentially access platform secrets via debug interfaces.
- Record
CVE-2018-3652- CVSS 3.1
- 7.6 High
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon Processor D Family allows a limited physical presence attacker to potentially access platform secrets via debug interfaces.
- Record
CVE-2018-3652- Updated
- 2026-11-02
EUVDEUVD-2018-15506 No score
Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon Processor D Family allows a limited physical presence attacker to potentially access platform secrets via debug interfaces.
- Record
EUVD-2018-15506- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jh7f-g95c-2jp7
Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation...
Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon Processor D Family allows a limited physical presence attacker to potentially access platform secrets via debug interfaces.
- Record
GHSA-jh7f-g95c-2jp7- CVSS 3.1
- 7.6 High
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
- intel xeon
- intel atom c
- intel xeon bronze 3104
- intel xeon bronze 3106
- intel xeon e3
- intel xeon e3 1220 v5
- intel xeon e3 1220 v6
- intel xeon e3 1225 v5
- intel xeon e3 1225 v6
- intel xeon e3 1230 v5
- intel xeon e3 1230 v6
- intel xeon e3 1235l v5
Show 23 moreShow less
- intel xeon e3 1240 v5
- intel xeon e3 1240 v6
- intel xeon e3 1240l v5
- intel xeon e3 1245 v5
- intel xeon e3 1245 v6
- intel xeon e3 1260l v5
- intel xeon e3 1268l v5
- intel xeon e3 1270 v5
- intel xeon e3 1270 v6
- intel xeon e3 1275 v5
- intel xeon e3 1275 v6
- intel xeon e3 1280 v5
- intel xeon e3 1280 v6
- intel xeon e3 1285 v6
- intel xeon e3 1501l v6
- intel xeon e3 1501m v6
- intel xeon e3 1505l v5
- intel xeon e3 1505l v6
- intel xeon e3 1505m v5
- intel xeon gold
- intel xeon platinum
- intel xeon silver
- intel corporation xeon processor
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-3652 is a high vulnerability (CVSS 7.6) in Intel Xeon, published July 10, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 31st percentile. No source names a fixed version.