{"id":"CVE-2018-12169","aliases":["EUVD-2018-4147","GHSA-7hjg-jw54-wcj9"],"status":"published","title":"Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core...","description":"Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypass firmware authentication.","severity":{"version":"3.0","score":7.6,"vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00548,"percentile":0.46151,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287"],"published":"2018-09-21T20:00:00Z","modified":"2026-06-17T01:37:15Z","products":[{"vendor":"intel","product":"core_i3"},{"vendor":"intel","product":"core_i5"},{"vendor":"intel","product":"core_i7"},{"vendor":"intel","product":"core_i9"},{"vendor":"lenovo","product":"thinkpad_11e"},{"vendor":"lenovo","product":"thinkpad_e480"},{"vendor":"lenovo","product":"thinkpad_e580"},{"vendor":"lenovo","product":"thinkpad_l380"},{"vendor":"lenovo","product":"thinkpad_l380_yoga"},{"vendor":"lenovo","product":"thinkpad_l480"},{"vendor":"lenovo","product":"thinkpad_l580"},{"vendor":"lenovo","product":"thinkpad_p51"},{"vendor":"lenovo","product":"thinkpad_p51s"},{"vendor":"lenovo","product":"thinkpad_p52"},{"vendor":"lenovo","product":"thinkpad_p52s"},{"vendor":"lenovo","product":"thinkpad_p71"},{"vendor":"lenovo","product":"thinkpad_p72"},{"vendor":"lenovo","product":"thinkpad_t25"},{"vendor":"lenovo","product":"thinkpad_t470"},{"vendor":"lenovo","product":"thinkpad_t470p"},{"vendor":"lenovo","product":"thinkpad_t470s"},{"vendor":"lenovo","product":"thinkpad_t480"},{"vendor":"lenovo","product":"thinkpad_t480s"},{"vendor":"lenovo","product":"thinkpad_t570"},{"vendor":"lenovo","product":"thinkpad_t580"},{"vendor":"lenovo","product":"thinkpad_x1_carbon"},{"vendor":"lenovo","product":"thinkpad_x1_tablet"},{"vendor":"lenovo","product":"thinkpad_x1_yoga"},{"vendor":"lenovo","product":"thinkpad_x270"},{"vendor":"lenovo","product":"thinkpad_x280"},{"vendor":"lenovo","product":"thinkpad_x380_yoga"},{"vendor":"lenovo","product":"thinkpad_yoga_370"}],"references":[{"url":"http://www.securityfocus.com/bid/105387","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://support.lenovo.com/us/en/solutions/LEN-20527","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Third Party Advisory"]},{"url":"https://edk2-docs.gitbooks.io/security-advisory/content/unauthenticated-firmware-chain-of-trust-bypass.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12169"},{"url":"https://github.com/advisories/GHSA-7hjg-jw54-wcj9"}],"sources":{"cve":[{"id":"CVE-2018-12169","description":"Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypass firmware authentication.","status":"published","published":"2018-09-21T20:00:00Z","modified":"2024-08-05T08:30:59.483Z","updated_at":"2026-11-02T14:35:06.679212Z"}],"euvd":[{"id":"EUVD-2018-4147","description":"Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypass firmware authentication.","status":"published","published":"2018-09-21T20:00:00Z","modified":"2024-08-05T08:30:59Z","updated_at":"2026-11-03T02:39:53.575925Z"}],"ghsa":[{"id":"GHSA-7hjg-jw54-wcj9","title":"Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core...","description":"Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypass firmware authentication.","status":"published","published":"2022-05-14T01:46:48Z","modified":"2023-02-02T05:04:30Z","cvss":[{"version":"3.0","score":7.6,"vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:51:53.265489Z"}],"nvd":[{"id":"CVE-2018-12169","description":"Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypass firmware authentication.","status":"published","published":"2018-09-21T20:29:00.233Z","modified":"2026-06-17T01:37:15.237Z","cvss":[{"version":"3.0","score":7.6,"vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:04:40.661264Z"}]}}