high7.6
CVE-2018-12169
Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation …
Impact
Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypass firmware authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intel | Core I3 | Versions 4000m, 4005u, 4010u, 4010y, 4012y, 4020y |
| Intel | Core I5 | Versions 7y54, 7y57, 4200h, 4200m, 4200u, 4200y |
| Intel | Core I7 | Versions 7y75, 4500u, 4510u, 4550u, 4558u, 4578u |
| Intel | Core I9 | Version 8950hk |
| Lenovo | Thinkpad 11e | All versions |
| Lenovo | Thinkpad E480 | All versions |
| Lenovo | Thinkpad E580 | All versions |
| Lenovo | Thinkpad L380 | All versions |
| Lenovo | Thinkpad L380 Yoga | All versions |
| Lenovo | Thinkpad L480 | All versions |
| Lenovo | Thinkpad L580 | All versions |
| Lenovo | Thinkpad P51 | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/105387
- https://edk2-docs.gitbooks.io/security-advisory/content/unauthenticated-firmware-chain-of-trust-bypass.html
- https://support.lenovo.com/us/en/solutions/LEN-20527
- http://www.securityfocus.com/bid/105387
- https://edk2-docs.gitbooks.io/security-advisory/content/unauthenticated-firmware-chain-of-trust-bypass.html
- https://support.lenovo.com/us/en/solutions/LEN-20527