CVE-2017-5701

moderate-risk

Published 2017-10-11

Insecure platform configuration in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows an attacker with physical presence to run arbitrary code via unauthorized firmware modification during BIOS Recovery.

Do I need to act?

0.07% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.1/10 High

PHYSICAL / HIGH complexity

Affected Products (20)

Nuc7I7Bnh Firmware

Nuc7I5Bnh Firmware

Nuc7I5Bnk Firmware

Nuc7I3Bnh Firmware

Affected Vendors

Intel

References (4)

Third Party Advisory http://www.securityfocus.com/bid/101257

Patch https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languagei...

Third Party Advisory http://www.securityfocus.com/bid/101257

Patch https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languagei...

/ 100

moderate-risk

Severity 18/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 26/34 · High