CVEvulnerability

CVE-2018-12169

7.6 HIGH Published 2018-09-21 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-09-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.6 HIGH — CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-287

Description

Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypass firmware authentication.

Affected configurations

• intel core i3 4000m • intel core i3 4005u • intel core i3 4010u • intel core i3 4010y • intel core i3 4012y • intel core i3 4020y • intel core i3 4025u • intel core i3 4030u • intel core i3 4030y • intel core i3 4100e • intel core i3 4100m • intel core i3 4100u • intel core i3 4102e • intel core i3 4110e • intel core i3 4110m • intel core i3 4112e • intel core i3 4120u • intel core i3 4130 • intel core i3 4130t • intel core i3 4150 • intel core i3 4150t • intel core i3 4158u • intel core i3 4160 • intel core i3 4160t • intel core i3 4170 • intel core i3 4170t • intel core i3 4330 • intel core i3 4330t • intel core i3 4330te • intel core i3 4340 • intel core i3 4340te • intel core i3 4350 • intel core i3 4350t • intel core i3 4360 • intel core i3 4360t • intel core i3 4370 • intel core i3 4370t • intel core i3 5005u • intel core i3 5010u • intel core i3 5015u • intel core i3 5020u • intel core i3 5157u • intel core i3 6006u • intel core i3 6098p • intel core i3 6100 • intel core i3 6100e • intel core i3 6100h • intel core i3 6100t • intel core i3 6100te • intel core i3 6100u • intel core i3 6102e • intel core i3 6157u • intel core i3 6167u • intel core i3 6300 • intel core i3 6300t • intel core i3 6320 • intel core i3 7020u • intel core i3 7100 • intel core i3 7100e • intel core i3 7100h … and 285 more

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References