CVE-2018-12169
Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core...
Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypass firmware authentication.
Attack profile
How easy it is to exploit
- Attack vector
- Physical
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypass firmware authentication.
- Record
CVE-2018-12169- CVSS 3.0
- 7.6 High
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE List No score
Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypass firmware authentication.
- Record
CVE-2018-12169- Updated
- 2026-11-02
EUVDEUVD-2018-4147 No score
Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypass firmware authentication.
- Record
EUVD-2018-4147- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7hjg-jw54-wcj9
Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core...
Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypass firmware authentication.
- Record
GHSA-7hjg-jw54-wcj9- CVSS 3.0
- 7.6 High
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-287
- Updated
- 2026-11-02
Affected products
- intel core i3
- intel core i5
- intel core i7
- intel core i9
- lenovo thinkpad 11e
- lenovo thinkpad e480
- lenovo thinkpad e580
- lenovo thinkpad l380
- lenovo thinkpad l380 yoga
- lenovo thinkpad l480
- lenovo thinkpad l580
- lenovo thinkpad p51
Show 20 moreShow less
- lenovo thinkpad p51s
- lenovo thinkpad p52
- lenovo thinkpad p52s
- lenovo thinkpad p71
- lenovo thinkpad p72
- lenovo thinkpad t25
- lenovo thinkpad t470
- lenovo thinkpad t470p
- lenovo thinkpad t470s
- lenovo thinkpad t480
- lenovo thinkpad t480s
- lenovo thinkpad t570
- lenovo thinkpad t580
- lenovo thinkpad x1 carbon
- lenovo thinkpad x1 tablet
- lenovo thinkpad x1 yoga
- lenovo thinkpad x270
- lenovo thinkpad x280
- lenovo thinkpad x380 yoga
- lenovo thinkpad yoga 370
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-12169 is a high vulnerability (CVSS 7.6) in Intel Core I3, published September 21, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.55%, the 46th percentile. No source names a fixed version.