Insufficient input validation in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to execute arbitrary code via manipulation of memory.
CVSS Vector
CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:HIntel Nuc7i3bnh
HWIntelall versionsIntel Nuc7i3bnh Firmware
OSIntelayaplcel.86a.0041bnkbl357.86a.0052ccsklm30.86a.0052ccsklm5v.86a.0052dnkbli30.86a.0026dnkbli5v.86a.0026kyskli70.86a.0050rybdwi35.86a.0366syskli35.86a.0062tybyt20h.86a.0015Intel Nuc7i3bnk
HWIntelall versionsIntel Nuc7i3bnk Firmware
OSIntelayaplcel.86a.0041bnkbl357.86a.0052ccsklm30.86a.0052ccsklm5v.86a.0052dnkbli30.86a.0026dnkbli5v.86a.0026kyskli70.86a.0050rybdwi35.86a.0366syskli35.86a.0062tybyt20h.86a.0015Intel Nuc7i5bnh
HWIntelall versionsIntel Nuc7i5bnh Firmware
OSIntelayaplcel.86a.0041bnkbl357.86a.0052ccsklm30.86a.0052ccsklm5v.86a.0052dnkbli30.86a.0026dnkbli5v.86a.0026kyskli70.86a.0050rybdwi35.86a.0366syskli35.86a.0062tybyt20h.86a.0015Intel Nuc7i5bnk
HWIntelall versionsIntel Nuc7i5bnk Firmware
OSIntelayaplcel.86a.0041bnkbl357.86a.0052ccsklm30.86a.0052ccsklm5v.86a.0052dnkbli30.86a.0026dnkbli5v.86a.0026kyskli70.86a.0050rybdwi35.86a.0366syskli35.86a.0062tybyt20h.86a.0015Intel Nuc7i7bnh
HWIntelall versionsIntel Nuc7i7bnh Firmware
OSIntelayaplcel.86a.0041bnkbl357.86a.0052ccsklm30.86a.0052ccsklm5v.86a.0052dnkbli30.86a.0026dnkbli5v.86a.0026kyskli70.86a.0050rybdwi35.86a.0366syskli35.86a.0062tybyt20h.86a.0015
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
RCE
CWE
Related vulnerabilities
CVE-2017-5691CRITICAL9.0PL ✓same product
Błędna weryfikacja w procesorach Intel umożliwia naruszenie ochrony SGX
CVE-2017-5700HIGH8.4same product
Insufficient protection of password storage in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7...
CVE-2017-5701HIGH7.1same product
Insecure platform configuration in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i...
CVE-2017-5722HIGH7.5same product
Incorrect policy enforcement in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BN...
CVE-2020-8742MEDIUM6.7same product
Improper input validation in the firmware for Intel(R) NUCs may allow a privileged user to potentially enable ...