PT-2017-16684

CVE-2017-5722

·

Published

2017-10-11

·

Updated

2019-10-03

Description by

CVSS 3.1
7.5
High
MetricsAV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Intel NUC7i3BNK versions BN0049 and below Intel NUC7i3BNH versions BN0049 and below Intel NUC7i5BNK versions BN0049 and below Intel NUC7i5BNH versions BN0049 and below Intel NUC7i7BNH versions BN0049 and below
Description The issue is related to incorrect policy enforcement in system firmware, allowing attackers with local or physical access to bypass integrity protections by manipulating firmware storage.
Recommendations For Intel NUC7i3BNK versions BN0049 and below, update the system firmware to a version above BN0049. For Intel NUC7i3BNH versions BN0049 and below, update the system firmware to a version above BN0049. For Intel NUC7i5BNK versions BN0049 and below, update the system firmware to a version above BN0049. For Intel NUC7i5BNH versions BN0049 and below, update the system firmware to a version above BN0049. For Intel NUC7i7BNH versions BN0049 and below, update the system firmware to a version above BN0049.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾