CVE-2017-5700

high-risk

Published 2017-10-11

Insufficient protection of password storage in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to bypass Administrator and User passwords via access to password storage.

Do I need to act?

0.05% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 8.4/10 High

LOCAL / LOW complexity

Affected Products (20)

Nuc7I7Bnh Firmware

Nuc7I5Bnh Firmware

Nuc7I5Bnk Firmware

Nuc7I3Bnh Firmware

Affected Vendors

Intel

References (4)

Third Party Advisory http://www.securityfocus.com/bid/101241

Patch https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languagei...

Third Party Advisory http://www.securityfocus.com/bid/101241

Patch https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languagei...

/ 100

high-risk

Severity 26/34 · High

Exploitability 0/34 · Minimal

Exposure 26/34 · High