CVE-2017-5722

moderate-risk

Published 2017-10-11

Incorrect policy enforcement in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows attackers with local or physical access to bypass enforcement of integrity protections via manipulation of firmware storage.

Do I need to act?

0.05% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.5/10 High

LOCAL / HIGH complexity

Affected Products (20)

Nuc7I7Bnh Firmware

Nuc7I5Bnh Firmware

Nuc7I5Bnk Firmware

Nuc7I3Bnh Firmware

Affected Vendors

Intel

References (4)

Third Party Advisory http://www.securityfocus.com/bid/101236

Patch https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languagei...

Third Party Advisory http://www.securityfocus.com/bid/101236

Patch https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languagei...

/ 100

moderate-risk

Severity 20/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 26/34 · High