CVE-2017-5721

CWE-20 — Improper Input Validation3 documents3 sources
Severity
7.5HIGH
EPSS
4.0%
top 11.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Intel Corporation NUC KitsIntel Nuc7i3bnh FirmwareIntel Nuc7i3bnk Firmware+3 more
Timeline
PublishedOct 11
Latest updateMay 17

Description

Insufficient input validation in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to execute arbitrary code via manipulation of memory.

CVSS vector

CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:HExploitability: 0.8 | Impact: 6.0

Affected Packages6 packages

▶NVDintel/nuc7i3bnh_firmware10 versions+9
▶NVDintel/nuc7i3bnk_firmware10 versions+9
▶NVDintel/nuc7i5bnh_firmware10 versions+9
▶NVDintel/nuc7i5bnk_firmware10 versions+9
▶NVDintel/nuc7i7bnh_firmware10 versions+9

Patches

Patch: security-center.intel.com ↗Patch: security-center.intel.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-hg9f-cr6x-3gxw: Insufficient input validation in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows loca↗2022-05-17
▶
CVEList
CVE-2017-5721: Insufficient input validation in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows loca↗2017-10-11
▶
CVE-2017-5721 (HIGH CVSS 7.5) | Insufficient input validation in sy | cvebase.io