What’s Vulnerable › Vulnerabilities

CVE-2018-3652

• Severity: high (CVSS 7.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-07-10 · updated 2026-06-17
• Weakness: CWE-200

Description

Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon Processor D Family allows a limited physical presence attacker to potentially access platform secrets via debug interfaces.

Affected products

• Intel Atom C: c2308, c2316, c2338, c2350, c2358, c2508 (+27)
• Intel Xeon: d-1513n, d-1518, d-1520, d-1521, d-1523n, d-1527 (+29)
• Intel Xeon Bronze 3104: all versions
• Intel Xeon Bronze 3106: all versions
• Intel Xeon E3: 1505m_v6, 1515m_v5, 1535m_v5, 1535m_v6, 1545m_v5, 1558l_v5 (+5)
• Intel Xeon E3 1220 V5: all versions
• Intel Xeon E3 1220 V6: all versions
• Intel Xeon E3 1225 V5: all versions
• Intel Xeon E3 1225 V6: all versions
• Intel Xeon E3 1230 V5: all versions
• Intel Xeon E3 1230 V6: all versions
• Intel Xeon E3 1235L V5: all versions
• Intel Xeon E3 1240 V5: all versions
• Intel Xeon E3 1240 V6: all versions
• Intel Xeon E3 1240L V5: all versions
• Intel Xeon E3 1245 V5: all versions
• Intel Xeon E3 1245 V6: all versions
• Intel Xeon E3 1260L V5: all versions
• Intel Xeon E3 1268L V5: all versions
• Intel Xeon E3 1270 V5: all versions
• Intel Xeon E3 1270 V6: all versions
• Intel Xeon E3 1275 V5: all versions
• Intel Xeon E3 1275 V6: all versions
• Intel Xeon E3 1280 V5: all versions
• Intel Xeon E3 1280 V6: all versions
• Intel Xeon E3 1285 V6: all versions
• Intel Xeon E3 1501L V6: all versions
• Intel Xeon E3 1501M V6: all versions
• Intel Xeon E3 1505L V5: all versions
• Intel Xeon E3 1505L V6: all versions

References

• https://security.netapp.com/advisory/ntap-20180802-0001/
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00127.html
• https://security.netapp.com/advisory/ntap-20180802-0001/
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00127.html

Get alerted when CVE-2018-3652 or the next vulnerability affects your stack