vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2018-12169

N/A
Published: September 21, 2018 at 08:00 PM UTC
Updated: June 17, 2026 at 01:37 AM UTC
32 products affected across 2 vendorsCore I5Core I7Core I3

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.5%

Description

Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypass firmware authentication.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Core I3· Intel
95%
4000m4005u4010u4010y4012y4020y4025u4030u4030y4100e4100m4100u4102e4110e4110m4112e4120u41304130t41504150t4158u41604160t41704170t43304330t4330te43404340te43504350t43604360t43704370t5005u5010u5015u5020u5157u6006u6098p61006100e6100h6100t6100te6100u6102e6157u6167u63006300t63207020u71007100e7100h7100t7100u7101e7101te7102e7130u7167u73007300t73207350k81008100h8100t8109u8130u8145u83008300t8350k
Core I5· Intel
95%
4200h4200m4200u4200y4202y4210h4210m4210u4210y4220y4250u4258u4260u4278u4288u4300m4300u4300y4302y4308u4310m4310u4330m4340m4350u4360u4400e4402e4402ec4410e4422e44304430s44404440s44604460s4460t45704570r4570s4570t4570te45904590s4590t46704670k4670r4670s4670t4690k4690s4690t5200u5250u5257u5287u5300u5350h5350u5575r5675c5675r6200u6260u6267u6287u6300hq6300u6350hq6360u64006400t6402p6440eq6440hq6442eq65006500t6500te6585r66006600k6600t6685r7200u7260u7267u7287u7300hq7300u7360u74007400t7440eq7440hq7442eq75007500t76007600k7600t7y547y578200y8250u8259u8265u8269u8300h8305g8350u84008400b8400h8400t85008500b8500t86008600k8600t
Core I7· Intel
95%
4500u4510u4550u4558u4578u4600m4600u4610m4610y4650u4700ec4700eq4700hq4700mq4702ec4702hq4702mq4710hq4710mq4712hq4712mq4720hq4722hq4750hq4760hq4765t47704770hq4770k4770r4770s4770t4770te47714785t47904790k4790s4790t4800mq4810mq4850hq4860hq4870hq4900mq4910mq4950hq4960hq4980hq5500u5550u5557u5600u5650u5700eq5700hq5750hq5775c5775r5820k5850eq5850hq5950hq6500u6560u6567u6600u6650u6660u67006700hq6700k6700t6700te6770hq6785r6820eq6820hk6820hq6822eq6870hq6920hq6970hq7500u7560u7567u7600u7660u77007700hq7700k7700t7820eq7820hk7820hq7920hq7y758086k8500y8550u8559u8565u8650u87008700b8700k8700t8705g8706g8709g8750h8809g8850h
Core I9· Intel
95%
8950hk
ThinkPad 11E· Lenovo
95%
All versions
ThinkPad E480· Lenovo
95%
All versions
ThinkPad E580· Lenovo
95%
All versions
ThinkPad L380· Lenovo
95%
All versions
ThinkPad L380 Yoga· Lenovo
95%
All versions
ThinkPad L480· Lenovo
95%
All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (3)

VDB Entryx_refsource_BIDThird Party Advisory
Source: [email protected]
http://www.securityfocus.com/bid/105387
x_refsource_CONFIRMThird Party Advisory
Source: [email protected]
https://edk2-docs.gitbooks.io/security-advisory/content/unauthenticated-firmware-chain-of-trust-bypass.html
x_refsource_CONFIRMMitigationThird Party Advisory
Source: [email protected]
https://support.lenovo.com/us/en/solutions/LEN-20527

CVSS

4.6MEDIUM[email protected]
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-287

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card