CVE-2018-3652
High
Description
Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon Processor D Family allows a limited physical presence attacker to potentially access platform secrets via debug interfaces.
SeverityHigh
CVSS7.6
Exploit probability—
ProductIntel Xeon
PublishedJul 10, 2018
First seenJul 10, 2018
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel xeon_e3 | 1505m_v6, 1515m_v5, 1535m_v5, 1535m_v6, 1545m_v5, 1558l_v5, 1565l_v5, 1575m_v5, 1578l_v5, 1585_v5, 1585l_v5 | — |
| intel xeon_e3_1220_v5 | No range specified | — |
| intel xeon_e3_1220_v6 | No range specified | — |
| intel xeon_e3_1225_v5 | No range specified | — |
| intel xeon_e3_1225_v6 | No range specified | — |
| intel xeon_e3_1230_v5 | No range specified | — |
| intel xeon_e3_1230_v6 | No range specified | — |
| intel xeon_e3_1235l_v5 | No range specified | — |
| intel xeon_e3_1240_v5 | No range specified | — |
| intel xeon_e3_1240_v6 | No range specified | — |
| intel xeon_e3_1240l_v5 | No range specified | — |
| intel xeon_e3_1245_v5 | No range specified | — |
| intel xeon_e3_1245_v6 | No range specified | — |
| intel xeon_e3_1260l_v5 | No range specified | — |
| intel xeon_e3_1268l_v5 | No range specified | — |
| intel xeon_e3_1270_v5 | No range specified | — |
| intel xeon_e3_1270_v6 | No range specified | — |
| intel xeon_e3_1275_v5 | No range specified | — |
| intel xeon_e3_1275_v6 | No range specified | — |
| intel xeon_e3_1280_v5 | No range specified | — |
| intel xeon_e3_1280_v6 | No range specified | — |
| intel xeon_e3_1285_v6 | No range specified | — |
| intel xeon_e3_1501l_v6 | No range specified | — |
| intel xeon_e3_1501m_v6 | No range specified | — |
| intel xeon_e3_1505l_v5 | No range specified | — |
| intel xeon_e3_1505l_v6 | No range specified | — |
| intel xeon_e3_1505m_v5 | No range specified | — |
| intel xeon_bronze_3104 | No range specified | — |
| intel xeon_bronze_3106 | No range specified | — |
| intel xeon_gold | 5115, 5118, 5119t, 5120, 5120t, 5122, 6126, 6126f, 6126t, 6128, 6130, 6130f, 6130t, 6132, 6134, 6134m, 6136, 6138, 6138f, 6138p, 6138t, 6140, 6140m, 6142, 6142f, 6142m, 6144, 6146, 6148, 6148f, 6150, 6152, 6154 | — |
| intel xeon_platinum | 8153, 8156, 8158, 8160, 8160f, 8160m, 8160t, 8164, 8168, 8170, 8170m, 8176, 8176f, 8176m, 8180, 8180m | — |
| intel xeon_silver | 4108, 4109t, 4110, 4112, 4114, 4114t, 4116, 4116t | — |
| intel xeon | d-1513n, d-1518, d-1520, d-1521, d-1523n, d-1527, d-1528, d-1529, d-1531, d-1533n, d-1537, d-1539, d-1540, d-1541, d-1543n, d-1548, d-1553n, d-1557, d-1559, d-1567, d-1571, d-1577, d-2123it, d-2141i, d-2142it, d-2143it, d-2145nt, d-2146nt, d-2161i, d-2163it, d-2166nt, d-2173it, d-2177nt, d-2183it, d-2187nt | — |
| intel atom_c | c2308, c2316, c2338, c2350, c2358, c2508, c2516, c2518, c2530, c2538, c2550, c2558, c2718, c2730, c2738, c2750, c2758, c3308, c3336, c3338, c3508, c3538, c3558, c3708, c3750, c3758, c3808, c3830, c3850, c3858, c3950, c3955, c3958 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.