CVE-2018-3652: Intel Atom C

High severity, CVSS 7.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon Processor D Family allows a limited physical presence attacker to potentially access platform secrets via debug interfaces.

Affected products

  • Intel Atom C: version c2308 only; version c2316 only; version c2338 only; version c2350 only; version c2358 only; version c2508 only; …
  • Intel Xeon: version d-1513n only; version d-1518 only; version d-1520 only; version d-1521 only; version d-1523n only; version d-1527 only; …
  • Intel Xeon Bronze 3104: affected versions not specified
  • Intel Xeon Bronze 3106: affected versions not specified
  • Intel Xeon e3: version 1505m_v6 only; version 1515m_v5 only; version 1535m_v5 only; version 1535m_v6 only; version 1545m_v5 only; version 1558l_v5 only; …
  • Intel Xeon e3 1220 v5: affected versions not specified
  • Intel Xeon e3 1220 v6: affected versions not specified
  • Intel Xeon e3 1225 v5: affected versions not specified
  • Intel Xeon e3 1225 v6: affected versions not specified
  • Intel Xeon e3 1230 v5: affected versions not specified
  • Intel Xeon e3 1230 v6: affected versions not specified
  • Intel Xeon e3 1235l v5: affected versions not specified
  • Intel Xeon e3 1240 v5: affected versions not specified
  • Intel Xeon e3 1240 v6: affected versions not specified
  • Intel Xeon e3 1240l v5: affected versions not specified
  • Intel Xeon e3 1245 v5: affected versions not specified
  • Intel Xeon e3 1245 v6: affected versions not specified
  • Intel Xeon e3 1260l v5: affected versions not specified
  • Intel Xeon e3 1268l v5: affected versions not specified
  • Intel Xeon e3 1270 v5: affected versions not specified
  • Intel Xeon e3 1270 v6: affected versions not specified
  • Intel Xeon e3 1275 v5: affected versions not specified
  • Intel Xeon e3 1275 v6: affected versions not specified
  • Intel Xeon e3 1280 v5: affected versions not specified
  • Intel Xeon e3 1280 v6: affected versions not specified
  • and 9 more

Published 2018-07-10. Last modified 2026-06-17.