CVE-2018-12169

Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypass firmware authentication.

• CWE-287

• http://www.securityfocus.com/bid/105387Third Party Advisory, VDB Entry
• https://edk2-docs.gitbooks.io/security-advisory/content/unauthenticated-firmware-chain-of-trust-bypass.htmlThird Party Advisory
• https://support.lenovo.com/us/en/solutions/LEN-20527Mitigation, Third Party Advisory
• http://www.securityfocus.com/bid/105387Third Party Advisory, VDB Entry
• https://edk2-docs.gitbooks.io/security-advisory/content/unauthenticated-firmware-chain-of-trust-bypass.htmlThird Party Advisory
• https://support.lenovo.com/us/en/solutions/LEN-20527Mitigation, Third Party Advisory

Published

Sep 21, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12163A DLL injection vulnerability in the Intel IoT Developers Ki…
• CVE-2018-12164Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-12165Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-12166Insufficient write protection in firmware for Intel(R) Optan…
• CVE-2018-12167Firmware update routine in bootloader for Intel(R) Optane(TM…
• CVE-2018-12168Privilege escalation in file permissions in Intel Computing …
• CVE-2018-1217Avamar Installation Manager in Dell EMC Avamar Server 7.3.1,…
• CVE-2018-12170Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-12171Privilege escalation in Intel Baseboard Management Controlle…
• CVE-2018-12172Improper password hashing in firmware in Intel Server Board …
• CVE-2018-12173Insufficient access protection in firmware in Intel Server B…
• CVE-2018-12174Heap overflow in Intel Trace Analyzer 2018 in Intel Parallel…