{"id":"CVE-2018-3652","aliases":["EUVD-2018-15506","GHSA-jh7f-g95c-2jp7"],"status":"published","title":"Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation...","description":"Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon Processor D Family allows a limited physical presence attacker to potentially access platform secrets via debug interfaces.","severity":{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00374,"percentile":0.31639,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2018-07-10T21:00:00Z","modified":"2026-06-17T01:57:37Z","products":[{"vendor":"intel","product":"atom_c"},{"vendor":"intel","product":"xeon"},{"vendor":"intel","product":"xeon_bronze_3104"},{"vendor":"intel","product":"xeon_bronze_3106"},{"vendor":"intel","product":"xeon_e3"},{"vendor":"intel","product":"xeon_e3_1220_v5"},{"vendor":"intel","product":"xeon_e3_1220_v6"},{"vendor":"intel","product":"xeon_e3_1225_v5"},{"vendor":"intel","product":"xeon_e3_1225_v6"},{"vendor":"intel","product":"xeon_e3_1230_v5"},{"vendor":"intel","product":"xeon_e3_1230_v6"},{"vendor":"intel","product":"xeon_e3_1235l_v5"},{"vendor":"intel","product":"xeon_e3_1240_v5"},{"vendor":"intel","product":"xeon_e3_1240_v6"},{"vendor":"intel","product":"xeon_e3_1240l_v5"},{"vendor":"intel","product":"xeon_e3_1245_v5"},{"vendor":"intel","product":"xeon_e3_1245_v6"},{"vendor":"intel","product":"xeon_e3_1260l_v5"},{"vendor":"intel","product":"xeon_e3_1268l_v5"},{"vendor":"intel","product":"xeon_e3_1270_v5"},{"vendor":"intel","product":"xeon_e3_1270_v6"},{"vendor":"intel","product":"xeon_e3_1275_v5"},{"vendor":"intel","product":"xeon_e3_1275_v6"},{"vendor":"intel","product":"xeon_e3_1280_v5"},{"vendor":"intel","product":"xeon_e3_1280_v6"},{"vendor":"intel","product":"xeon_e3_1285_v6"},{"vendor":"intel","product":"xeon_e3_1501l_v6"},{"vendor":"intel","product":"xeon_e3_1501m_v6"},{"vendor":"intel","product":"xeon_e3_1505l_v5"},{"vendor":"intel","product":"xeon_e3_1505l_v6"},{"vendor":"intel","product":"xeon_e3_1505m_v5"},{"vendor":"intel","product":"xeon_gold"},{"vendor":"intel","product":"xeon_platinum"},{"vendor":"intel","product":"xeon_silver"},{"vendor":"intel corporation","product":"intel xeon processor"}],"references":[{"url":"https://security.netapp.com/advisory/ntap-20180802-0001/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00127.html","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3652"},{"url":"https://github.com/advisories/GHSA-jh7f-g95c-2jp7"}],"sources":{"cve":[{"id":"CVE-2018-3652","description":"Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon Processor D Family allows a limited physical presence attacker to potentially access platform secrets via debug interfaces.","status":"published","published":"2018-07-10T21:00:00Z","modified":"2024-08-05T04:50:30.453Z","updated_at":"2026-11-02T14:35:05.262903Z"}],"euvd":[{"id":"EUVD-2018-15506","description":"Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon Processor D Family allows a limited physical presence attacker to potentially access platform secrets via debug interfaces.","status":"published","published":"2018-07-10T21:00:00Z","modified":"2024-08-05T04:50:30Z","updated_at":"2026-11-03T02:40:15.208866Z"}],"ghsa":[{"id":"GHSA-jh7f-g95c-2jp7","title":"Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation...","description":"Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon Processor D Family allows a limited physical presence attacker to potentially access platform secrets via debug interfaces.","status":"published","published":"2022-05-13T01:27:10Z","modified":"2023-02-01T05:07:31Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:50:33.423478Z"}],"nvd":[{"id":"CVE-2018-3652","description":"Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon Processor D Family allows a limited physical presence attacker to potentially access platform secrets via debug interfaces.","status":"published","published":"2018-07-10T21:29:00.983Z","modified":"2026-06-17T01:57:37.927Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:04:32.929986Z"}]}}