{"id":"CVE-2018-3652","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-3652","generatedAt":"2026-10-29T02:03:30.594Z","title":"Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon Processor D Family allows a limited physical presence attacker to potentially…","description":"Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon Processor D Family allows a limited physical presence attacker to potentially access platform secrets via debug interfaces.","published":"2018-07-10T21:29:01.000Z","lastModified":"2026-06-17T01:57:38.000Z","status":"Modified","sourceIdentifier":"secure@intel.com","cvss":{"version":"3.1","score":7.6,"severity":"HIGH","vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"},"cwe":["CWE-200"],"affected":["intel/xeon e3","intel/xeon e3 1220 v5","intel/xeon e3 1220 v6","intel/xeon e3 1225 v5","intel/xeon e3 1225 v6","intel/xeon e3 1230 v5","intel/xeon e3 1230 v6","intel/xeon e3 1235l v5","intel/xeon e3 1240 v5","intel/xeon e3 1240 v6","intel/xeon e3 1240l v5","intel/xeon e3 1245 v5","intel/xeon e3 1245 v6","intel/xeon e3 1260l v5","intel/xeon e3 1268l v5","intel/xeon e3 1270 v5","intel/xeon e3 1270 v6","intel/xeon e3 1275 v5","intel/xeon e3 1275 v6","intel/xeon e3 1280 v5","intel/xeon e3 1280 v6","intel/xeon e3 1285 v6","intel/xeon e3 1501l v6","intel/xeon e3 1501m v6","intel/xeon e3 1505l v5","intel/xeon e3 1505l v6","intel/xeon e3 1505m v5","intel/xeon bronze 3104","intel/xeon bronze 3106","intel/xeon gold","intel/xeon platinum","intel/xeon silver","intel/xeon","intel/atom c"],"epss":{"score":0.00374,"percentile":0.31222,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.37%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://security.netapp.com/advisory/ntap-20180802-0001/","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00127.html","tags":["Mitigation","Vendor Advisory"],"source":"secure@intel.com"},{"url":"https://security.netapp.com/advisory/ntap-20180802-0001/","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00127.html","tags":["Mitigation","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-3652","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}