CVE-2018-12169 - Improper Authentication

Severity

46%

Complexity

39%

Confidentiality

106%

Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypass firmware authentication.

Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypass firmware authentication.

CVSS 3.0 Base Score 7.6. CVSS Attack Vector: physical. CVSS Attack Complexity: low. CVSS Vector: (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

CVSS 2.0 Base Score 4.6. CVSS Attack Vector: local. CVSS Attack Complexity: low. CVSS Vector: (AV:L/AC:L/Au:N/C:P/I:P/A:P).

Demo Examples

Improper Authentication

CWE-287

The following code intends to ensure that the user is already logged in. If not, the code performs authentication with the user-provided username and password. If successful, it sets the loggedin and user cookies to "remember" that the user has already logged in. Finally, the code performs administrator tasks if the logged-in user has the "Administrator" username, as recorded in the user cookie.


               
}
}
ExitError("Error: you need to log in first");
);
);
DoAdministratorTasks();

Unfortunately, this code can be bypassed. The attacker can set the cookies independently so that the code does not check the username and password. The attacker could do this with an HTTP request containing headers such as:


               
[body of request]

By setting the loggedin cookie to "true", the attacker bypasses the entire authentication check. By using the "Administrator" value in the user cookie, the attacker also gains privileges to administer the software.

Improper Authentication

CWE-287

Overview

First reported 6 years ago

2018-09-21 20:29:00

Last updated 6 years ago

2018-12-20 13:59:00

Affected Software

Intel Core I3 4000M

4000m

Intel Core I3 4005U

4005u

Intel Core I3 4010U

4010u

Intel Core I3 4010Y

4010y

Intel Core I3 4012Y

4012y

Intel Core I3 4020Y

4020y

Intel Core I3 4025U

4025u

Intel Core I3 4030U

4030u

Intel Core I3 4030Y

4030y

Intel Core I3 4100E

4100e

Intel Core I3 4100M

4100m

Intel Core I3 4100U

4100u

Intel Core I3 4102E

4102e

Intel Core I3 4110E

4110e

Intel Core I3 4110M

4110m

Intel Core I3 4112E

4112e

Intel Core I3 4120U

4120u

Intel Core I3 4130

4130

Intel Core I3 4130T

4130t

Intel Core I3 4150

4150

Intel Core I3 4150T

4150t

Intel Core I3 4158U

4158u

Intel Core I3 4160

4160

Intel Core I3 4160T

4160t

Intel Core I3 4170

4170

Intel Core I3 4170T

4170t

Intel Core I3 4330

4330

Intel Core I3 4330T

4330t

Intel Core I3 4330TE

4330te

Intel Core I3 4340

4340

Intel Core I3 4340TE

4340te

Intel Core I3 4350

4350

Intel Core I3 4350T

4350t

Intel Core I3 4360

4360

Intel Core I3 4360T

4360t

Intel Core I3 4370

4370

Intel Core I3 4370T

4370t

Intel Core I3 5005U

5005u

Intel Core I3 5010U

5010u

Intel Core I3 5015U

5015u

Intel Core I3 5020U

5020u

Intel Core I3 5157U

5157u

Intel Core I3 6006U

6006u

Intel Core I3 6098P

6098p

Intel Core I3 6100

6100

Intel Core I3 6100E

6100e

Intel Core I3 6100H

6100h

Intel Core I3 6100T

6100t

Intel Core I3 6100TE

6100te

Intel Core I3 6100U

6100u

Intel Core I3 6102E

6102e

Intel Core I3 6157U

6157u

Intel Core I3 6167U

6167u

Intel Core I3 6300

6300

Intel Core I3 6300T

6300t

Intel Core I3 6320

6320

Intel Core I3 7020u

7020u

Intel Core I3 7100

7100

Intel Core I3 7100e

7100e

Intel Core I3 7100h

7100h

Intel Core I3 7100t

7100t

Intel Core I3 7100u

7100u

Intel Core I3 7101e

7101e

Intel Core I3 7101te

7101te

Intel Core I3 7102e

7102e

Intel Core I3 7130u

7130u

Intel Core I3 7167u

7167u

Intel Core I3 7300

7300

Intel Core I3 7300t

7300t

Intel Core I3 7320

7320

Intel Core I3 7350k

7350k

Intel Core I3 8100

8100

Intel Core I3 8100h

8100h

Intel Core I3 8100t

8100t

Intel Core I3 8109u

8109u

Intel Core I3 8130u

8130u

Intel Core I3 8145u

8145u

Intel Core I3 8300

8300

Intel Core I3 8300t

8300t

Intel Core I3 8350K

8350k

Intel Core I5 7y54

7y54

Intel Core I5 7y57

7y57

Intel Core I5 4200H

4200h

Intel Core I5 4200M

4200m

Intel Core I5 4200U

4200u

Intel Core I5 4200Y

4200y

Intel Core I5 4202Y

4202y

Intel Core I5 4210H

4210h

Intel Core I5 4210M

4210m

Intel Core I5 4210U

4210u

Intel Core I5 4210Y

4210y

Intel Core I5 4220Y

4220y

Intel Core I5 4250U

4250u

Intel Core I5 4258U

4258u

Intel Core I5 4260U

4260u

Intel Core I5 4278U

4278u

Intel Core I5 4288U

4288u

Intel Core I5 4300M

4300m

Intel Core I5 4300U

4300u

Intel Core I5 4300Y

4300y

Intel Core I5 4302Y

4302y

Intel Core I5 4308U

4308u

Intel Core I5 4310M

4310m

Intel Core I5 4310U

4310u

Intel Core I5 4330M

4330m

Intel Core I5 4340M

4340m

Intel Core I5 4350U

4350u

Intel Core I5 4360U

4360u

Intel Core I5 4400E

4400e

Intel Core I5 4402E

4402e

Intel Core I5 4402EC

4402ec

Intel Core I5 4410E

4410e

Intel Core I5 4422E

4422e

Intel Core I5 4430

4430

Intel Core I5 4430S

4430s

Intel Core I5 4440

4440

Intel Core I5 4440S

4440s

Intel Core I5 4460

4460

Intel Core I5 4460S

4460s

Intel Core I5 4460T

4460t

Intel Core I5 4570

4570

Intel Core I5 4570R

4570r

Intel Core I5 4570S

4570s

Intel Core I5 4570T

4570t

Intel Core I5 4570TE

4570te

Intel Core I5 4590

4590

Intel Core I5 4590S

4590s

Intel Core I5 4590T

4590t

Intel Core I5 4670

4670

Intel Core I5 4670K

4670k

Intel Core I5 4670R

4670r

Intel Core I5 4670S

4670s

Intel Core I5 4670T

4670t

Intel Core I5 4690K

4690k

Intel Core I5 4690S

4690s

Intel Core I5 4690T

4690t

Intel Core I5 5200U

5200u

Intel Core I5 5250U

5250u

Intel Core I5 5257U

5257u

Intel Core I5 5287U

5287u

Intel Core I5 5300U

5300u

Intel Core I5 5350H

5350h

Intel Core I5 5350U

5350u

Intel Core I5 5575R

5575r

Intel Core I5 5675C

5675c

Intel Core I5 5675R

5675r

Intel Core I5 6200U

6200u

Intel Core I5 6260U

6260u

Intel Core I5 6267U

6267u

Intel Core I5 6287U

6287u

Intel Core I5 6300HQ

6300hq

Intel Core I5 6300U

6300u

Intel Core I5 6350HQ

6350hq

Intel Core I5 6360U

6360u

Intel Core I5 6400

6400

Intel Core I5 6400T

6400t

Intel Core I5 6402P

6402p

Intel Core I5 6440EQ

6440eq

Intel Core I5 6440HQ

6440hq

Intel Core I5 6442EQ

6442eq

Intel Core I5 6500

6500

Intel Core I5 6500T

6500t

Intel Core I5 6500TE

6500te

Intel Core I5 6585R

6585r

Intel Core I5 6600

6600

Intel Core I5 6600K

6600k

Intel Core I5 6600T

6600t

Intel Core I5 6685R

6685r

Intel Core I5 7200u

7200u

Intel Core I5 7260u

7260u

Intel Core I5 7267u

7267u

Intel Core I5 7287u

7287u

Intel Core I5 7300hq

7300hq

Intel Core I5 7300u

7300u

Intel Core I5 7360u

7360u

Intel Core I5 7400

7400

Intel Core I5 7400t

7400t

Intel Core I5 7440eq

7440eq

Intel Core I5 7440hq

7440hq

Intel Core I5 7442eq

7442eq

Intel Core I5 7500

7500

Intel Core I5 7500t

7500t

Intel Core I5 7600

7600

Intel Core I5 7600k

7600k

Intel Core I5 7600t

7600t

Intel Core I5 8200y

8200y

Intel Core I5 8250U

8250u

Intel Core I5 8259u

8259u

Intel Core I5 8265u

8265u

Intel Core I5 8269u

8269u

Intel Core I5 8300h

8300h

Intel Core I5 8305g

8305g

Intel Core I5 8350U

8350u

Intel Core I5 8400

8400

Intel Core I5 8400b

8400b

Intel Core I5 8400h

8400h

Intel Core I5 8400t

8400t

Intel Core I5 8500

8500

Intel Core I5 8500b

8500b

Intel Core I5 8500t

8500t

Intel Core I5 8600

8600

Intel Core I5 8600K

8600k

Intel Core I5 8600t

8600t

Intel Core I7 7Y75

7y75

Intel Core I7 4500U

4500u

Intel Core I7 4510U

4510u

Intel Core I7 4550U

4550u

Intel Core I7 4558U

4558u

Intel Core I7 4578U

4578u

Intel Core I7 4600M

4600m

Intel Core I7 4600U

4600u

Intel Core I7 4610M

4610m

Intel Core I7 4610Y

4610y

Intel Core I7 4650U

4650u

Intel Core I7 4700EC

4700ec

Intel Core I7 4700EQ

4700eq

Intel Core I7 4700HQ

4700hq

Intel Core I7 4700MQ

4700mq

Intel Core I7 4702EC

4702ec

Intel Core I7 4702HQ

4702hq

Intel Core I7 4702MQ

4702mq

Intel Core I7 4710HQ

4710hq

Intel Core I7 4710MQ

4710mq

Intel Core I7 4712HQ

4712hq

Intel Core I7 4712MQ

4712mq

Intel Core I7 4720HQ

4720hq

Intel Core I7 4722HQ

4722hq

Intel Core I7 4750HQ

4750hq

Intel Core I7 4760HQ

4760hq

Intel Core I7 4765T

4765t

Intel Core I7 4770

4770

Intel Core I7 4770HQ

4770hq

Intel Core I7 4770K

4770k

Intel Core I7 4770R

4770r

Intel Core I7 4770S

4770s

Intel Core I7 4770T

4770t

Intel Core I7 4770TE

4770te

Intel Core I7 4771

4771

Intel Core I7 4785T

4785t

Intel Core I7 4790

4790

Intel Core I7 4790K

4790k

Intel Core I7 4790S

4790s

Intel Core I7 4790T

4790t

Intel Core I7 4800MQ

4800mq

Intel Core I7 4810MQ

4810mq

Intel Core I7 4850HQ

4850hq

Intel Core I7 4860HQ

4860hq

Intel Core I7 4870HQ

4870hq

Intel Core I7 4900MQ

4900mq

Intel Core I7 4910MQ

4910mq

Intel Core I7 4950HQ

4950hq

Intel Core I7 4960HQ

4960hq

Intel Core I7 4980HQ

4980hq

Intel Core I7 5500U

5500u

Intel Core I7 5550U

5550u

Intel Core I7 5557U

5557u

Intel Core I7 5600U

5600u

Intel Core I7 5650U

5650u

Intel Core I7 5700EQ

5700eq

Intel Core I7 5700HQ

5700hq

Intel Core I7 5750HQ

5750hq

Intel Core I7 5775C

5775c

Intel Core I7 5775R

5775r

Intel Core I7 5820k

5820k

Intel Core I7 5850EQ

5850eq

Intel Core I7 5850HQ

5850hq

Intel Core I7 5950HQ

5950hq

Intel Core I7 7500U

7500u

Intel Core I7 7560U

7560u

Intel Core I7 7567U

7567u

Intel Core I7 7600U

7600u

Intel Core I7 7660U

7660u

Intel Core I7 7700

7700

Intel Core I7 7700HQ

7700hq

Intel Core I7 7700K

7700k

Intel Core I7 7700T

7700t

Intel Core I7 7820EQ

7820eq

Intel Core I7 7820HK

7820hk

Intel Core I7 7820HQ

7820hq

Intel Core I7 7920HQ

7920hq

Intel Core I7 8086k

8086k

Intel Core I7 8500y

8500y

Intel Core I7 8550U

8550u

Intel Core I7 8559u

8559u

Intel Core I7 8565u

8565u

Intel Core I7 8650U

8650u

Intel Core I7 8700

8700

Intel Core I7 8700b

8700b

Intel Core I7 8700K

8700k

Intel Core I7 8700t

8700t

Intel Core I7 8705g

8705g

Intel Core I7 8706g

8706g

Intel Core I7 8709g

8709g

Intel Core I7 8750h

8750h

Intel Core I7 8809g

8809g

Intel Core I7 8850h

8850h

Intel Core I9 8950hk

8950hk

Lenovo ThinkPad E480

Lenovo ThinkPad E580

Lenovo ThinkPad L380

Lenovo ThinkPad L380 Yoga

Lenovo ThinkPad L480

Lenovo ThinkPad L580

Lenovo ThinkPad P51

Lenovo ThinkPad P51s

Lenovo ThinkPad P52

Lenovo ThinkPad P52s

Lenovo ThinkPad P72

Lenovo ThinkPad T25

Lenovo ThinkPad T470

Lenovo ThinkPad T470p

Lenovo ThinkPad T470s

Lenovo ThinkPad T480

Lenovo ThinkPad T480s

Lenovo ThinkPad T570

Lenovo ThinkPad T580

Lenovo ThinkPad X270

Lenovo ThinkPad X280

Lenovo ThinkPad X380 Yoga

Lenovo ThinkPad Yoga 370

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.