{"id":"CVE-2018-12169","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-12169","generatedAt":"2026-10-28T21:27:24.876Z","title":"Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may…","description":"Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypass firmware authentication.","published":"2018-09-21T20:29:00.000Z","lastModified":"2026-06-17T01:37:15.000Z","status":"Modified","sourceIdentifier":"secure@intel.com","cvss":{"version":"3.0","score":7.6,"severity":"HIGH","vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"},"cwe":["CWE-287"],"affected":["intel/core i3","intel/core i5","intel/core i7","intel/core i9","lenovo/thinkpad 11e","lenovo/thinkpad e480","lenovo/thinkpad e580","lenovo/thinkpad l380","lenovo/thinkpad l380 yoga","lenovo/thinkpad l480","lenovo/thinkpad l580","lenovo/thinkpad p51","lenovo/thinkpad p51s","lenovo/thinkpad p52","lenovo/thinkpad p52s","lenovo/thinkpad p71","lenovo/thinkpad p72","lenovo/thinkpad t25","lenovo/thinkpad t470","lenovo/thinkpad t470p","lenovo/thinkpad t470s","lenovo/thinkpad t480","lenovo/thinkpad t480s","lenovo/thinkpad t570","lenovo/thinkpad t580","lenovo/thinkpad x1 carbon","lenovo/thinkpad x1 tablet","lenovo/thinkpad x1 yoga","lenovo/thinkpad x270","lenovo/thinkpad x280","lenovo/thinkpad x380 yoga","lenovo/thinkpad yoga 370"],"epss":{"score":0.00548,"percentile":0.45679,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.55%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"http://www.securityfocus.com/bid/105387","tags":["Third Party Advisory","VDB Entry"],"source":"secure@intel.com"},{"url":"https://edk2-docs.gitbooks.io/security-advisory/content/unauthenticated-firmware-chain-of-trust-bypass.html","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://support.lenovo.com/us/en/solutions/LEN-20527","tags":["Mitigation","Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://www.securityfocus.com/bid/105387","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://edk2-docs.gitbooks.io/security-advisory/content/unauthenticated-firmware-chain-of-trust-bypass.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.lenovo.com/us/en/solutions/LEN-20527","tags":["Mitigation","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-12169","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}