CVSS 3.1
7.6 highCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HCVE-2018-3652
Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon Processor D Family allows a limited physical presence attacker to potentially access platform secrets via debug interfaces.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- intel:atom_c
- intel:xeon
- intel:xeon_bronze_3104
- intel:xeon_bronze_3106
- intel:xeon_e3
- intel:xeon_e3_1220_v5
- intel:xeon_e3_1220_v6
- intel:xeon_e3_1225_v5
- intel:xeon_e3_1225_v6
- intel:xeon_e3_1230_v5
- intel:xeon_e3_1230_v6
- intel:xeon_e3_1235l_v5
- intel:xeon_e3_1240_v5
- intel:xeon_e3_1240_v6
- intel:xeon_e3_1240l_v5
- intel:xeon_e3_1245_v5
- intel:xeon_e3_1245_v6
- intel:xeon_e3_1260l_v5
- intel:xeon_e3_1268l_v5
- intel:xeon_e3_1270_v5
- intel:xeon_e3_1270_v6
- intel:xeon_e3_1275_v5
- intel:xeon_e3_1275_v6
- intel:xeon_e3_1280_v5
- intel:xeon_e3_1280_v6
- intel:xeon_e3_1285_v6
- intel:xeon_e3_1501l_v6
- intel:xeon_e3_1501m_v6
- intel:xeon_e3_1505l_v5
- intel:xeon_e3_1505l_v6
- intel:xeon_e3_1505m_v5
- intel:xeon_gold
- intel:xeon_platinum
- intel:xeon_silver