CVEvulnerability
CVE-2018-12169
7.6 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-09-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.6 HIGH — CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-287
Description
Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypass firmware authentication.
Affected configurations
• intel core i3 4000m
• intel core i3 4005u
• intel core i3 4010u
• intel core i3 4010y
• intel core i3 4012y
• intel core i3 4020y
• intel core i3 4025u
• intel core i3 4030u
• intel core i3 4030y
• intel core i3 4100e
• intel core i3 4100m
• intel core i3 4100u
• intel core i3 4102e
• intel core i3 4110e
• intel core i3 4110m
• intel core i3 4112e
• intel core i3 4120u
• intel core i3 4130
• intel core i3 4130t
• intel core i3 4150
• intel core i3 4150t
• intel core i3 4158u
• intel core i3 4160
• intel core i3 4160t
• intel core i3 4170
• intel core i3 4170t
• intel core i3 4330
• intel core i3 4330t
• intel core i3 4330te
• intel core i3 4340
• intel core i3 4340te
• intel core i3 4350
• intel core i3 4350t
• intel core i3 4360
• intel core i3 4360t
• intel core i3 4370
• intel core i3 4370t
• intel core i3 5005u
• intel core i3 5010u
• intel core i3 5015u
• intel core i3 5020u
• intel core i3 5157u
• intel core i3 6006u
• intel core i3 6098p
• intel core i3 6100
• intel core i3 6100e
• intel core i3 6100h
• intel core i3 6100t
• intel core i3 6100te
• intel core i3 6100u
• intel core i3 6102e
• intel core i3 6157u
• intel core i3 6167u
• intel core i3 6300
• intel core i3 6300t
• intel core i3 6320
• intel core i3 7020u
• intel core i3 7100
• intel core i3 7100e
• intel core i3 7100h
… and 285 more
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://www.securityfocus.com/bid/105387 Third Party Advisory, VDB Entry
- https://edk2-docs.gitbooks.io/security-advisory/content/unauthenticated-firmware-chain-of-trust-bypass.html Third Party Advisory
- https://support.lenovo.com/us/en/solutions/LEN-20527 Mitigation, Third Party Advisory
- http://www.securityfocus.com/bid/105387 Third Party Advisory, VDB Entry
- https://edk2-docs.gitbooks.io/security-advisory/content/unauthenticated-firmware-chain-of-trust-bypass.html Third Party Advisory
- https://support.lenovo.com/us/en/solutions/LEN-20527 Mitigation, Third Party Advisory