CVE-2017-5700 — HIGH (8.4) — White Hats Nepal

Vulnerability Description

Insufficient protection of password storage in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to bypass Administrator and User passwords via access to password storage.

CVSS Score

8.4

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Intel	Nuc7I7Bnh Firmware	ayaplcel.86a.0041
Intel	Nuc7I7Bnh	-
Intel	Nuc7I5Bnh Firmware	ayaplcel.86a.0041
Intel	Nuc7I5Bnh	-
Intel	Nuc7I5Bnk Firmware	ayaplcel.86a.0041
Intel	Nuc7I5Bnk	-
Intel	Nuc7I3Bnh Firmware	ayaplcel.86a.0041
Intel	Nuc7I3Bnh	-
Intel	Nuc7I3Bnk Firmware	ayaplcel.86a.0041
Intel	Nuc7I3Bnk	-

Related Weaknesses (CWE)

CWE-522

References

http://www.securityfocus.com/bid/101241Third Party AdvisoryVDB Entry
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languageiPatchThird Party Advisory
http://www.securityfocus.com/bid/101241Third Party AdvisoryVDB Entry
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languageiPatchThird Party Advisory

FAQ

What is CVE-2017-5700?

CVE-2017-5700 is a vulnerability with a CVSS score of 8.4 (HIGH). Insufficient protection of password storage in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to bypass Administrator ...

How severe is CVE-2017-5700?

CVE-2017-5700 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-5700?

Check the references section above for vendor advisories and patch information. Affected products include: Intel Nuc7I7Bnh Firmware, Intel Nuc7I7Bnh, Intel Nuc7I5Bnh Firmware, Intel Nuc7I5Bnh, Intel Nuc7I5Bnk Firmware.