CVE-2017-5721

Insufficient input validation in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to execute arbitrary code via manipulation of memory.

Score

CVSS 3.0 7.5 High

Status

Modified - secure@intel.com

Published

2017-10-11

Last modified

2024-09-16

Weaknesses

CWE-20

Affected products

• Nuc7i3bnh Firmware (Intel)
• Nuc7i3bnk Firmware (Intel)
• Nuc7i5bnh Firmware (Intel)
• Nuc7i5bnk Firmware (Intel)
• Nuc7i7bnh Firmware (Intel)
• Nuc Kits (Intel Corporation)

References

• https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languageid=en-fr