CVE-2017-5700

High

Published: 11/10/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Insufficient protection of password storage in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to bypass Administrator and User passwords via access to password storage.

Risk Assessment

Attackers can gain access to the system by bypassing password protections, potentially leading to loss of data confidentiality and control over the system.

Recommendation

It is recommended to update the system firmware to the latest version to patch this vulnerability and implement additional security measures to protect stored passwords.

Other vulnerabilities in Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH

CVE-2017-5722High
Incorrect policy enforcement in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows attackers with local or physical access to bypass enforcement of integrity protections via manipulation of firmware storage.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS