VULNERABILITY INTELLIGENCE
CVE-2018-12169
CVSS score7.6 HIGH
EPSS probability0.55%
CISA KEVNot currently listed
Published2018-09-21
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Description
Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypass firmware authentication.
Weakness classification
- CWE-287: Improper Authentication
Primary references
- secure@intel.com — Third Party Advisory, VDB Entry
- secure@intel.com — Third Party Advisory
- secure@intel.com — Mitigation, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Third Party Advisory