7.6
CVE-2018-12169
- EPSS 0.06%
- Veröffentlicht 21.09.2018 20:29:00
- Zuletzt bearbeitet 21.11.2024 03:44:41
- Quelle secure@intel.com
- Teams Watchlist Login
- Unerledigt Login
Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypass firmware authentication.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lenovo ≫ Thinkpad 11e Version-
Lenovo ≫ Thinkpad E480 Version-
Lenovo ≫ Thinkpad E580 Version-
Lenovo ≫ Thinkpad L380 Version-
Lenovo ≫ Thinkpad L380 Yoga Version-
Lenovo ≫ Thinkpad L480 Version-
Lenovo ≫ Thinkpad L580 Version-
Lenovo ≫ Thinkpad P51 Version-
Lenovo ≫ Thinkpad P51s Version-
Lenovo ≫ Thinkpad P52 Version-
Lenovo ≫ Thinkpad P52s Version-
Lenovo ≫ Thinkpad P71 Version-
Lenovo ≫ Thinkpad P72 Version-
Lenovo ≫ Thinkpad T25 Version-
Lenovo ≫ Thinkpad T470 Version-
Lenovo ≫ Thinkpad T470p Version-
Lenovo ≫ Thinkpad T470s Version-
Lenovo ≫ Thinkpad T480 Version-
Lenovo ≫ Thinkpad T480s Version-
Lenovo ≫ Thinkpad T570 Version-
Lenovo ≫ Thinkpad T580 Version-
Lenovo ≫ Thinkpad X1 Carbon Version-
Lenovo ≫ Thinkpad X1 Tablet Version-
Lenovo ≫ Thinkpad X1 Yoga Version-
Lenovo ≫ Thinkpad X270 Version-
Lenovo ≫ Thinkpad X280 Version-
Lenovo ≫ Thinkpad X380 Yoga Version-
Lenovo ≫ Thinkpad Yoga 370 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
Typ | Quelle | Score | Percentile |
---|---|---|---|
EPSS | FIRST.org | 0.06% | 0.171 |
Quelle | Base Score | Exploit Score | Impact Score | Vector String |
---|---|---|---|---|
nvd@nist.gov | 7.6 | 0.9 | 6 |
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
|
nvd@nist.gov | 4.6 | 3.9 | 6.4 |
AV:L/AC:L/Au:N/C:P/I:P/A:P
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.