CVE-2017-5722

CWE-269 — Improper Privilege Management3 documents3 sources

Severity

7.5HIGH

EPSS

0.0%

top 85.98%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel Corporation NUC Kits Intel Nuc7i3bnh Firmware Intel Nuc7i3bnk Firmware +3 more

Timeline

PublishedOct 11

Latest updateMay 13

Description

Incorrect policy enforcement in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows attackers with local or physical access to bypass enforcement of integrity protections via manipulation of firmware storage.

CVSS vector

CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:HExploitability: 0.8 | Impact: 6.0

Affected Packages6 packages

▶NVDintel/nuc7i3bnh_firmware10 versions+9

▶NVDintel/nuc7i3bnk_firmware10 versions+9

▶NVDintel/nuc7i5bnh_firmware10 versions+9

▶NVDintel/nuc7i5bnk_firmware10 versions+9

▶NVDintel/nuc7i7bnh_firmware10 versions+9

Patches

Patch: security-center.intel.com ↗Patch: security-center.intel.com ↗

🔴Vulnerability Details

GHSA

GHSA-9h2q-h58c-8mcq: Incorrect policy enforcement in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows attac↗2022-05-13

▶

CVEList

CVE-2017-5722: Incorrect policy enforcement in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows attac↗2017-10-11

▶