1. Home
  2. CVE Database
  3. CVE-2017-5721
HIGH · 7.5

CVE-2017-5721

Insufficient input validation in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to execute arbitrary code via manipula...

Vulnerability Description

Insufficient input validation in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to execute arbitrary code via manipulation of memory.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
IntelNuc7I7Bnh Firmwareayaplcel.86a.0041
IntelNuc7I7Bnh-
IntelNuc7I5Bnh Firmwareayaplcel.86a.0041
IntelNuc7I5Bnh-
IntelNuc7I5Bnk Firmwareayaplcel.86a.0041
IntelNuc7I5Bnk-
IntelNuc7I3Bnh Firmwareayaplcel.86a.0041
IntelNuc7I3Bnh-
IntelNuc7I3Bnk Firmwareayaplcel.86a.0041
IntelNuc7I3Bnk-

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2017-5721?

CVE-2017-5721 is a vulnerability with a CVSS score of 7.5 (HIGH). Insufficient input validation in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to execute arbitrary code via manipula...

How severe is CVE-2017-5721?

CVE-2017-5721 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-5721?

Check the references section above for vendor advisories and patch information. Affected products include: Intel Nuc7I7Bnh Firmware, Intel Nuc7I7Bnh, Intel Nuc7I5Bnh Firmware, Intel Nuc7I5Bnh, Intel Nuc7I5Bnk Firmware.