Insufficient input validation in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to execute arbitrary code via manipulation of memory.
oryginał ENCVSS Vector
CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:HIntel Nuc7i3bnh
HWIntelwszystkie wersjeIntel Nuc7i3bnh Firmware
OSIntelayaplcel.86a.0041bnkbl357.86a.0052ccsklm30.86a.0052ccsklm5v.86a.0052dnkbli30.86a.0026dnkbli5v.86a.0026kyskli70.86a.0050rybdwi35.86a.0366syskli35.86a.0062tybyt20h.86a.0015Intel Nuc7i3bnk
HWIntelwszystkie wersjeIntel Nuc7i3bnk Firmware
OSIntelayaplcel.86a.0041bnkbl357.86a.0052ccsklm30.86a.0052ccsklm5v.86a.0052dnkbli30.86a.0026dnkbli5v.86a.0026kyskli70.86a.0050rybdwi35.86a.0366syskli35.86a.0062tybyt20h.86a.0015Intel Nuc7i5bnh
HWIntelwszystkie wersjeIntel Nuc7i5bnh Firmware
OSIntelayaplcel.86a.0041bnkbl357.86a.0052ccsklm30.86a.0052ccsklm5v.86a.0052dnkbli30.86a.0026dnkbli5v.86a.0026kyskli70.86a.0050rybdwi35.86a.0366syskli35.86a.0062tybyt20h.86a.0015Intel Nuc7i5bnk
HWIntelwszystkie wersjeIntel Nuc7i5bnk Firmware
OSIntelayaplcel.86a.0041bnkbl357.86a.0052ccsklm30.86a.0052ccsklm5v.86a.0052dnkbli30.86a.0026dnkbli5v.86a.0026kyskli70.86a.0050rybdwi35.86a.0366syskli35.86a.0062tybyt20h.86a.0015Intel Nuc7i7bnh
HWIntelwszystkie wersjeIntel Nuc7i7bnh Firmware
OSIntelayaplcel.86a.0041bnkbl357.86a.0052ccsklm30.86a.0052ccsklm5v.86a.0052dnkbli30.86a.0026dnkbli5v.86a.0026kyskli70.86a.0050rybdwi35.86a.0366syskli35.86a.0062tybyt20h.86a.0015
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
RCE
CWE
Powiązane podatności
CVE-2017-5691CRITICAL9.0PL ✓ten sam produkt
Błędna weryfikacja w procesorach Intel umożliwia naruszenie ochrony SGX
CVE-2017-5700HIGH8.4ten sam produkt
Insufficient protection of password storage in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7...
CVE-2017-5701HIGH7.1ten sam produkt
Insecure platform configuration in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i...
CVE-2017-5722HIGH7.5ten sam produkt
Incorrect policy enforcement in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BN...
CVE-2020-8742MEDIUM6.7ten sam produkt
Improper input validation in the firmware for Intel(R) NUCs may allow a privileged user to potentially enable ...