CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Vulnerability Details : CVE-2018-3652

Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon Processor D Family allows a limited physical presence attacker to potentially access platform secrets via debug interfaces.
Publish Date : 2018-07-10 Last Update Date : 2019-10-02
Search Twitter   Search YouTube   Search Google

- CVSS Scores & Vulnerability Types

CVSS Score
4.6
Confidentiality Impact Partial (There is considerable informational disclosure.)
Integrity Impact Partial (Modification of some system files or information is possible, but the attacker does not have control over what can be modified, or the scope of what the attacker can affect is limited.)
Availability Impact Partial (There is reduced performance or interruptions in resource availability.)
Access Complexity Low (Specialized access conditions or extenuating circumstances do not exist. Very little knowledge or skill is required to exploit. )
Authentication Not required (Authentication is not required to exploit the vulnerability.)
Gained Access None
Vulnerability Type(s) Obtain Information
CWE ID 200

- Products Affected By CVE-2018-3652

# Product Type Vendor Product Version Update Edition Language
1 Hardware Intel Atom C C2308 Version Details Vulnerabilities
2 Hardware Intel Atom C C2316 Version Details Vulnerabilities
3 Hardware Intel Atom C C2338 Version Details Vulnerabilities
4 Hardware Intel Atom C C2350 Version Details Vulnerabilities
5 Hardware Intel Atom C C2358 Version Details Vulnerabilities
6 Hardware Intel Atom C C2508 Version Details Vulnerabilities
7 Hardware Intel Atom C C2516 Version Details Vulnerabilities
8 Hardware Intel Atom C C2518 Version Details Vulnerabilities
9 Hardware Intel Atom C C2530 Version Details Vulnerabilities
10 Hardware Intel Atom C C2538 Version Details Vulnerabilities
11 Hardware Intel Atom C C2550 Version Details Vulnerabilities
12 Hardware Intel Atom C C2558 Version Details Vulnerabilities
13 Hardware Intel Atom C C2718 Version Details Vulnerabilities
14 Hardware Intel Atom C C2730 Version Details Vulnerabilities
15 Hardware Intel Atom C C2738 Version Details Vulnerabilities
16 Hardware Intel Atom C C2750 Version Details Vulnerabilities
17 Hardware Intel Atom C C2758 Version Details Vulnerabilities
18 Hardware Intel Atom C C3308 Version Details Vulnerabilities
19 Hardware Intel Atom C C3336 Version Details Vulnerabilities
20 Hardware Intel Atom C C3338 Version Details Vulnerabilities
21 Hardware Intel Atom C C3508 Version Details Vulnerabilities
22 Hardware Intel Atom C C3538 Version Details Vulnerabilities
23 Hardware Intel Atom C C3558 Version Details Vulnerabilities
24 Hardware Intel Atom C C3708 Version Details Vulnerabilities
25 Hardware Intel Atom C C3750 Version Details Vulnerabilities
26 Hardware Intel Atom C C3758 Version Details Vulnerabilities
27 Hardware Intel Atom C C3808 Version Details Vulnerabilities
28 Hardware Intel Atom C C3830 Version Details Vulnerabilities
29 Hardware Intel Atom C C3850 Version Details Vulnerabilities
30 Hardware Intel Atom C C3858 Version Details Vulnerabilities
31 Hardware Intel Atom C C3950 Version Details Vulnerabilities
32 Hardware Intel Atom C C3955 Version Details Vulnerabilities
33 Hardware Intel Atom C C3958 Version Details Vulnerabilities
34 Hardware Intel Xeon D-1513n Version Details Vulnerabilities
35 Hardware Intel Xeon D-1518 Version Details Vulnerabilities
36 Hardware Intel Xeon D-1520 Version Details Vulnerabilities
37 Hardware Intel Xeon D-1521 Version Details Vulnerabilities
38 Hardware Intel Xeon D-1523n Version Details Vulnerabilities
39 Hardware Intel Xeon D-1527 Version Details Vulnerabilities
40 Hardware Intel Xeon D-1528 Version Details Vulnerabilities
41 Hardware Intel Xeon D-1529 Version Details Vulnerabilities
42 Hardware Intel Xeon D-1531 Version Details Vulnerabilities
43 Hardware Intel Xeon D-1533n Version Details Vulnerabilities
44 Hardware Intel Xeon D-1537 Version Details Vulnerabilities
45 Hardware Intel Xeon D-1539 Version Details Vulnerabilities
46 Hardware Intel Xeon D-1540 Version Details Vulnerabilities
47 Hardware Intel Xeon D-1541 Version Details Vulnerabilities
48 Hardware Intel Xeon D-1543n Version Details Vulnerabilities
49 Hardware Intel Xeon D-1548 Version Details Vulnerabilities
50 Hardware Intel Xeon D-1553n Version Details Vulnerabilities
51 Hardware Intel Xeon D-1557 Version Details Vulnerabilities
52 Hardware Intel Xeon D-1559 Version Details Vulnerabilities
53 Hardware Intel Xeon D-1567 Version Details Vulnerabilities
54 Hardware Intel Xeon D-1571 Version Details Vulnerabilities
55 Hardware Intel Xeon D-1577 Version Details Vulnerabilities
56 Hardware Intel Xeon D-2123it Version Details Vulnerabilities
57 Hardware Intel Xeon D-2141i Version Details Vulnerabilities
58 Hardware Intel Xeon D-2142it Version Details Vulnerabilities
59 Hardware Intel Xeon D-2143it Version Details Vulnerabilities
60 Hardware Intel Xeon D-2145nt Version Details Vulnerabilities
61 Hardware Intel Xeon D-2146nt Version Details Vulnerabilities
62 Hardware Intel Xeon D-2161i Version Details Vulnerabilities
63 Hardware Intel Xeon D-2163it Version Details Vulnerabilities
64 Hardware Intel Xeon D-2166nt Version Details Vulnerabilities
65 Hardware Intel Xeon D-2173it Version Details Vulnerabilities
66 Hardware Intel Xeon D-2177nt Version Details Vulnerabilities
67 Hardware Intel Xeon D-2183it Version Details Vulnerabilities
68 Hardware Intel Xeon D-2187nt Version Details Vulnerabilities
69 Hardware Intel Xeon Bronze 3104 Version Details Vulnerabilities
70 Hardware Intel Xeon Bronze 3106 Version Details Vulnerabilities
71 Hardware Intel Xeon E3 1220 V5 Version Details Vulnerabilities
72 Hardware Intel Xeon E3 1220 V6 Version Details Vulnerabilities
73 Hardware Intel Xeon E3 1225 V5 Version Details Vulnerabilities
74 Hardware Intel Xeon E3 1225 V6 Version Details Vulnerabilities
75 Hardware Intel Xeon E3 1230 V5 Version Details Vulnerabilities
76 Hardware Intel Xeon E3 1230 V6 Version Details Vulnerabilities
77 Hardware Intel Xeon E3 1235l V5 Version Details Vulnerabilities
78 Hardware Intel Xeon E3 1240l V5 Version Details Vulnerabilities
79 Hardware Intel Xeon E3 1240 V5 Version Details Vulnerabilities
80 Hardware Intel Xeon E3 1240 V6 Version Details Vulnerabilities
81 Hardware Intel Xeon E3 1245 V5 Version Details Vulnerabilities
82 Hardware Intel Xeon E3 1245 V6 Version Details Vulnerabilities
83 Hardware Intel Xeon E3 1260l V5 Version Details Vulnerabilities
84 Hardware Intel Xeon E3 1268l V5 Version Details Vulnerabilities
85 Hardware Intel Xeon E3 1270 V5 Version Details Vulnerabilities
86 Hardware Intel Xeon E3 1270 V6 Version Details Vulnerabilities
87 Hardware Intel Xeon E3 1275 V5 Version Details Vulnerabilities
88 Hardware Intel Xeon E3 1275 V6 Version Details Vulnerabilities
89 Hardware Intel Xeon E3 1280 V5 Version Details Vulnerabilities
90 Hardware Intel Xeon E3 1280 V6 Version Details Vulnerabilities
91 Hardware Intel Xeon E3 1285 V6 Version Details Vulnerabilities
92 Hardware Intel Xeon E3 1501l V6 Version Details Vulnerabilities
93 Hardware Intel Xeon E3 1501m V6 Version Details Vulnerabilities
94 Hardware Intel Xeon E3 1505l V5 Version Details Vulnerabilities
95 Hardware Intel Xeon E3 1505l V6 Version Details Vulnerabilities
96 Hardware Intel Xeon E3 1505m V5 Version Details Vulnerabilities
97 Hardware Intel Xeon E3 1505m V6 Version Details Vulnerabilities
98 Hardware Intel Xeon E3 1515m V5 Version Details Vulnerabilities
99 Hardware Intel Xeon E3 1535m V5 Version Details Vulnerabilities
100 Hardware Intel Xeon E3 1535m V6 Version Details Vulnerabilities
101 Hardware Intel Xeon E3 1545m V5 Version Details Vulnerabilities
102 Hardware Intel Xeon E3 1558l V5 Version Details Vulnerabilities
103 Hardware Intel Xeon E3 1565l V5 Version Details Vulnerabilities
104 Hardware Intel Xeon E3 1575m V5 Version Details Vulnerabilities
105 Hardware Intel Xeon E3 1578l V5 Version Details Vulnerabilities
106 Hardware Intel Xeon E3 1585l V5 Version Details Vulnerabilities
107 Hardware Intel Xeon E3 1585 V5 Version Details Vulnerabilities
108 Hardware Intel Xeon Gold 5115 Version Details Vulnerabilities
109 Hardware Intel Xeon Gold 5118 Version Details Vulnerabilities
110 Hardware Intel Xeon Gold 5119t Version Details Vulnerabilities
111 Hardware Intel Xeon Gold 5120 Version Details Vulnerabilities
112 Hardware Intel Xeon Gold 5120t Version Details Vulnerabilities
113 Hardware Intel Xeon Gold 5122 Version Details Vulnerabilities
114 Hardware Intel Xeon Gold 6126 Version Details Vulnerabilities
115 Hardware Intel Xeon Gold 6126f Version Details Vulnerabilities
116 Hardware Intel Xeon Gold 6126t Version Details Vulnerabilities
117 Hardware Intel Xeon Gold 6128 Version Details Vulnerabilities
118 Hardware Intel Xeon Gold 6130 Version Details Vulnerabilities
119 Hardware Intel Xeon Gold 6130f Version Details Vulnerabilities
120 Hardware Intel Xeon Gold 6130t Version Details Vulnerabilities
121 Hardware Intel Xeon Gold 6132 Version Details Vulnerabilities
122 Hardware Intel Xeon Gold 6134 Version Details Vulnerabilities
123 Hardware Intel Xeon Gold 6134m Version Details Vulnerabilities
124 Hardware Intel Xeon Gold 6136 Version Details Vulnerabilities
125 Hardware Intel Xeon Gold 6138 Version Details Vulnerabilities
126 Hardware Intel Xeon Gold 6138f Version Details Vulnerabilities
127 Hardware Intel Xeon Gold 6138p Version Details Vulnerabilities
128 Hardware Intel Xeon Gold 6138t Version Details Vulnerabilities
129 Hardware Intel Xeon Gold 6140 Version Details Vulnerabilities
130 Hardware Intel Xeon Gold 6140m Version Details Vulnerabilities
131 Hardware Intel Xeon Gold 6142 Version Details Vulnerabilities
132 Hardware Intel Xeon Gold 6142f Version Details Vulnerabilities
133 Hardware Intel Xeon Gold 6142m Version Details Vulnerabilities
134 Hardware Intel Xeon Gold 6144 Version Details Vulnerabilities
135 Hardware Intel Xeon Gold 6146 Version Details Vulnerabilities
136 Hardware Intel Xeon Gold 6148 Version Details Vulnerabilities
137 Hardware Intel Xeon Gold 6148f Version Details Vulnerabilities
138 Hardware Intel Xeon Gold 6150 Version Details Vulnerabilities
139 Hardware Intel Xeon Gold 6152 Version Details Vulnerabilities
140 Hardware Intel Xeon Gold 6154 Version Details Vulnerabilities
141 Hardware Intel Xeon Platinum 8153 Version Details Vulnerabilities
142 Hardware Intel Xeon Platinum 8156 Version Details Vulnerabilities
143 Hardware Intel Xeon Platinum 8158 Version Details Vulnerabilities
144 Hardware Intel Xeon Platinum 8160 Version Details Vulnerabilities
145 Hardware Intel Xeon Platinum 8160f Version Details Vulnerabilities
146 Hardware Intel Xeon Platinum 8160m Version Details Vulnerabilities
147 Hardware Intel Xeon Platinum 8160t Version Details Vulnerabilities
148 Hardware Intel Xeon Platinum 8164 Version Details Vulnerabilities
149 Hardware Intel Xeon Platinum 8168 Version Details Vulnerabilities
150 Hardware Intel Xeon Platinum 8170 Version Details Vulnerabilities
151 Hardware Intel Xeon Platinum 8170m Version Details Vulnerabilities
152 Hardware Intel Xeon Platinum 8176 Version Details Vulnerabilities
153 Hardware Intel Xeon Platinum 8176f Version Details Vulnerabilities
154 Hardware Intel Xeon Platinum 8176m Version Details Vulnerabilities
155 Hardware Intel Xeon Platinum 8180 Version Details Vulnerabilities
156 Hardware Intel Xeon Platinum 8180m Version Details Vulnerabilities
157 Hardware Intel Xeon Silver 4108 Version Details Vulnerabilities
158 Hardware Intel Xeon Silver 4109t Version Details Vulnerabilities
159 Hardware Intel Xeon Silver 4110 Version Details Vulnerabilities
160 Hardware Intel Xeon Silver 4112 Version Details Vulnerabilities
161 Hardware Intel Xeon Silver 4114 Version Details Vulnerabilities
162 Hardware Intel Xeon Silver 4114t Version Details Vulnerabilities
163 Hardware Intel Xeon Silver 4116 Version Details Vulnerabilities
164 Hardware Intel Xeon Silver 4116t Version Details Vulnerabilities

- Number Of Affected Versions By Product

Vendor Product Vulnerable Versions
Intel Atom C 33
Intel Xeon 35
Intel Xeon Bronze 2
Intel Xeon E3 37
Intel Xeon Gold 33
Intel Xeon Platinum 16
Intel Xeon Silver 8

- References For CVE-2018-3652

https://security.netapp.com/advisory/ntap-20180802-0001/ CONFIRM
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00127.html CONFIRM

- Metasploit Modules Related To CVE-2018-3652

There are not any metasploit modules related to this CVE entry (Please visit www.metasploit.com for more information)


CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.