CVEvulnerability

CVE-2018-3652

7.6 HIGH Published 2018-07-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-07-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.6 HIGH — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-200

Description

Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon Processor D Family allows a limited physical presence attacker to potentially access platform secrets via debug interfaces.

Affected configurations

• intel xeon e3 1505m v6 • intel xeon e3 1515m v5 • intel xeon e3 1535m v5 • intel xeon e3 1535m v6 • intel xeon e3 1545m v5 • intel xeon e3 1558l v5 • intel xeon e3 1565l v5 • intel xeon e3 1575m v5 • intel xeon e3 1578l v5 • intel xeon e3 1585 v5 • intel xeon e3 1585l v5 • intel xeon e3 1220 v5 • intel xeon e3 1220 v6 • intel xeon e3 1225 v5 • intel xeon e3 1225 v6 • intel xeon e3 1230 v5 • intel xeon e3 1230 v6 • intel xeon e3 1235l v5 • intel xeon e3 1240 v5 • intel xeon e3 1240 v6 • intel xeon e3 1240l v5 • intel xeon e3 1245 v5 • intel xeon e3 1245 v6 • intel xeon e3 1260l v5 • intel xeon e3 1268l v5 • intel xeon e3 1270 v5 • intel xeon e3 1270 v6 • intel xeon e3 1275 v5 • intel xeon e3 1275 v6 • intel xeon e3 1280 v5 • intel xeon e3 1280 v6 • intel xeon e3 1285 v6 • intel xeon e3 1501l v6 • intel xeon e3 1501m v6 • intel xeon e3 1505l v5 • intel xeon e3 1505l v6 • intel xeon e3 1505m v5 • intel xeon bronze 3104 • intel xeon bronze 3106 • intel xeon gold 5115 • intel xeon gold 5118 • intel xeon gold 5119t • intel xeon gold 5120 • intel xeon gold 5120t • intel xeon gold 5122 • intel xeon gold 6126 • intel xeon gold 6126f • intel xeon gold 6126t • intel xeon gold 6128 • intel xeon gold 6130 • intel xeon gold 6130f • intel xeon gold 6130t • intel xeon gold 6132 • intel xeon gold 6134 • intel xeon gold 6134m • intel xeon gold 6136 • intel xeon gold 6138 • intel xeon gold 6138f • intel xeon gold 6138p • intel xeon gold 6138t … and 104 more

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References