Vulnerability Description
Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypass firmware authentication.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Intel | Core I3 | 4000m |
| Intel | Core I5 | 7y54 |
| Intel | Core I7 | 7y75 |
| Intel | Core I9 | 8950hk |
| Lenovo | Thinkpad 11E | - |
| Lenovo | Thinkpad E480 | - |
| Lenovo | Thinkpad E580 | - |
| Lenovo | Thinkpad L380 | - |
| Lenovo | Thinkpad L380 Yoga | - |
| Lenovo | Thinkpad L480 | - |
| Lenovo | Thinkpad L580 | - |
| Lenovo | Thinkpad P51 | - |
| Lenovo | Thinkpad P51S | - |
| Lenovo | Thinkpad P52 | - |
| Lenovo | Thinkpad P52S | - |
| Lenovo | Thinkpad P71 | - |
| Lenovo | Thinkpad P72 | - |
| Lenovo | Thinkpad T25 | - |
| Lenovo | Thinkpad T470 | - |
| Lenovo | Thinkpad T470P | - |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/105387Third Party AdvisoryVDB Entry
- https://edk2-docs.gitbooks.io/security-advisory/content/unauthenticated-firmwareThird Party Advisory
- https://support.lenovo.com/us/en/solutions/LEN-20527MitigationThird Party Advisory
- http://www.securityfocus.com/bid/105387Third Party AdvisoryVDB Entry
- https://edk2-docs.gitbooks.io/security-advisory/content/unauthenticated-firmwareThird Party Advisory
- https://support.lenovo.com/us/en/solutions/LEN-20527MitigationThird Party Advisory
FAQ
What is CVE-2018-12169?
CVE-2018-12169 is a vulnerability with a CVSS score of 7.6 (HIGH). Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation I...
How severe is CVE-2018-12169?
CVE-2018-12169 has been rated HIGH with a CVSS base score of 7.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-12169?
Check the references section above for vendor advisories and patch information. Affected products include: Intel Core I3, Intel Core I5, Intel Core I7, Intel Core I9, Lenovo Thinkpad 11E.