VulnerabilityModified

CVE-2018-12169

Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may…

HIGH 7.6EPSS 0.55%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.55%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

CVSS 3.0: 7.6 HIGHCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS: 0.55% probability · 45th percentile
CISA KEV: Not listed
Weakness: CWE-287
Affected: intel/core i3 · intel/core i5 · intel/core i7 · intel/core i9 · lenovo/thinkpad 11e · lenovo/thinkpad e480 · lenovo/thinkpad e580 · lenovo/thinkpad l380 · lenovo/thinkpad l380 yoga · lenovo/thinkpad l480 · lenovo/thinkpad l580 · lenovo/thinkpad p51 · lenovo/thinkpad p51s · lenovo/thinkpad p52 · lenovo/thinkpad p52s · lenovo/thinkpad p71 · lenovo/thinkpad p72 · lenovo/thinkpad t25 · lenovo/thinkpad t470 · lenovo/thinkpad t470p · +12 more
Source: secure@intel.com

References

http://www.securityfocus.com/bid/105387Third Party Advisory, VDB Entry
https://edk2-docs.gitbooks.io/security-advisory/content/unauthenticated-firmware-chain-of-trust-bypass.htmlThird Party Advisory
https://support.lenovo.com/us/en/solutions/LEN-20527Mitigation, Third Party Advisory
http://www.securityfocus.com/bid/105387Third Party Advisory, VDB Entry
https://edk2-docs.gitbooks.io/security-advisory/content/unauthenticated-firmware-chain-of-trust-bypass.htmlThird Party Advisory
https://support.lenovo.com/us/en/solutions/LEN-20527Mitigation, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.