CVE-2018-3652 describes a vulnerability in specific Intel Xeon processors (5th and 6th Gen E3, Scalable, and D Family) where existing UEFI setting restrictions for Direct Connect Interface (DCI) can be bypassed. This allows an attacker with limited physical access to potentially access sensitive platform secrets through debug interfaces. The vulnerability is rated High severity (CVSS 7.6) due to its physical attack vector, low complexity, and high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1505m_v6CPE matchmatch criteria | cpe:2.3:h:intel:xeon_e3:1505m_v6:*:*:*:*:*:*:* | ||
1515m_v5CPE matchmatch criteria | cpe:2.3:h:intel:xeon_e3:1515m_v5:*:*:*:*:*:*:* | ||
1535m_v5CPE matchmatch criteria | cpe:2.3:h:intel:xeon_e3:1535m_v5:*:*:*:*:*:*:* | ||
1535m_v6CPE matchmatch criteria | cpe:2.3:h:intel:xeon_e3:1535m_v6:*:*:*:*:*:*:* | ||
1545m_v5CPE matchmatch criteria | cpe:2.3:h:intel:xeon_e3:1545m_v5:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.0 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.