CVE-2017-5722

High

Published: 11/10/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Incorrect policy enforcement in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows attackers with local or physical access to bypass enforcement of integrity protections via manipulation of firmware storage.

Risk Assessment

Organizations may be exposed to attacks that allow modification of critical system components, potentially leading to data loss or system takeover.

Recommendation

It is recommended to update the firmware to the latest version to mitigate this vulnerability and to restrict physical access to the devices.

Other vulnerabilities in Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH

CVE-2017-5700High
Insufficient protection of password storage in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to bypass Administrator and User passwords via access to password storage.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS