var-201710-0954
Vulnerability from variot
Insufficient protection of password storage in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to bypass Administrator and User passwords via access to password storage. Intel NUC7i3BNK , NUC7i3BNH , NUC7i5BNK , NUC7i5BNH ,and NUC7i7BNH Vulnerabilities related to certificate and password management exist in the firmware.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. IntelBootgaurd has a local security bypass vulnerability that can be exploited by local attackers to bypass certain security restrictions. IntelNUC7i3BNK and other products are CPU (Central Processing Unit) products of Intel Corporation of the United States. A privilege elevation vulnerability exists in system firmware in several Intel products due to insufficient verification input by the program. An attacker could exploit the vulnerability to exploit arbitrary code by manipulating memory. Intel NUC is a powerful 4x4 inch micro PC with entertainment, gaming and work features, a customizable motherboard that supports all the memory, storage and operating systems you need. Multiple Intel products are prone to a local information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Intel NUC7i3BNK, etc. The following products and versions are affected: NUC7i3BNK BN0049 and earlier; NUC7i3BNH BN0049 and earlier; NUC7i5BNK BN0049 and earlier; NUC7i5BNH BN0049 and earlier; NUC7i7BNH BN0049 and earlier
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201710-0954", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "nuc7i7bnh", "scope": null, "trust": 2.4, "vendor": "intel", "version": null }, { "model": "nuc7i5bnk", "scope": null, "trust": 2.4, "vendor": "intel", "version": null }, { "model": "nuc7i5bnh", "scope": null, "trust": 2.4, "vendor": "intel", "version": null }, { "model": "nuc7i3bnk", "scope": null, "trust": 2.4, "vendor": "intel", "version": null }, { "model": "nuc7i3bnh", "scope": null, "trust": 2.4, "vendor": "intel", "version": null }, { "model": "bn0049", "scope": null, "trust": 2.4, "vendor": "intel", "version": null }, { "model": "nuc7i3bnk", "scope": "eq", "trust": 1.6, "vendor": "intel", "version": "syskli35.86a.0062" }, { "model": "nuc7i3bnk", "scope": "eq", "trust": 1.6, "vendor": "intel", "version": "tybyt20h.86a.0015" }, { "model": "nuc7i3bnk", "scope": "eq", "trust": 1.6, "vendor": "intel", "version": "dnkbli5v.86a.0026" }, { "model": "nuc7i3bnk", "scope": "eq", "trust": 1.6, "vendor": "intel", "version": "ccsklm30.86a.0052" }, { "model": "nuc7i3bnk", "scope": "eq", "trust": 1.6, "vendor": "intel", "version": "rybdwi35.86a.0366" }, { "model": "nuc7i3bnk", "scope": "eq", "trust": 1.6, "vendor": "intel", "version": "bnkbl357.86a.0052" }, { "model": "nuc7i3bnh", "scope": "eq", "trust": 1.6, "vendor": "intel", "version": "tybyt20h.86a.0015" }, { "model": "nuc7i3bnk", "scope": "eq", "trust": 1.6, "vendor": "intel", "version": "ccsklm5v.86a.0052" }, { "model": "nuc7i3bnk", "scope": "eq", "trust": 1.6, "vendor": "intel", "version": "kyskli70.86a.0050" }, { "model": "nuc7i3bnk", "scope": "eq", "trust": 1.6, "vendor": "intel", "version": "ayaplcel.86a.0041" }, { "model": "nuc7i7bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "ccsklm5v.86a.0052" }, { "model": "nuc7i5bnk", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "kyskli70.86a.0050" }, { "model": "nuc7i7bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "bnkbl357.86a.0052" }, { "model": "nuc7i5bnk", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "syskli35.86a.0062" }, { "model": "nuc7i3bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "dnkbli5v.86a.0026" }, { "model": "nuc7i7bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "kyskli70.86a.0050" }, { "model": "nuc7i5bnk", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "ayaplcel.86a.0041" }, { "model": "nuc7i7bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "ayaplcel.86a.0041" }, { "model": "nuc7i7bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "syskli35.86a.0062" }, { "model": "nuc7i5bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "ccsklm30.86a.0052" }, { "model": "nuc7i5bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "rybdwi35.86a.0366" }, { "model": "nuc7i5bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "dnkbli30.86a.0026" }, { "model": "nuc7i5bnk", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "tybyt20h.86a.0015" }, { "model": "nuc7i7bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "tybyt20h.86a.0015" }, { "model": "nuc7i5bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "ccsklm5v.86a.0052" }, { "model": "nuc7i5bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "bnkbl357.86a.0052" }, { "model": "nuc7i3bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "rybdwi35.86a.0366" }, { "model": "nuc7i5bnk", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "dnkbli5v.86a.0026" }, { "model": "nuc7i3bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "ccsklm30.86a.0052" }, { "model": "nuc7i3bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "dnkbli30.86a.0026" }, { "model": "nuc7i5bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "kyskli70.86a.0050" }, { "model": "nuc7i7bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "dnkbli5v.86a.0026" }, { "model": "nuc7i5bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "ayaplcel.86a.0041" }, { "model": "nuc7i3bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "ccsklm5v.86a.0052" }, { "model": "nuc7i3bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "bnkbl357.86a.0052" }, { "model": "nuc7i5bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "syskli35.86a.0062" }, { "model": "nuc7i3bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "kyskli70.86a.0050" }, { "model": "nuc7i3bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "syskli35.86a.0062" }, { "model": "nuc7i3bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "ayaplcel.86a.0041" }, { "model": "nuc7i5bnk", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "rybdwi35.86a.0366" }, { "model": "nuc7i3bnk", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "dnkbli30.86a.0026" }, { "model": "nuc7i5bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "tybyt20h.86a.0015" }, { "model": "nuc7i5bnk", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "ccsklm30.86a.0052" }, { "model": "nuc7i7bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "ccsklm30.86a.0052" }, { "model": "nuc7i5bnk", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "dnkbli30.86a.0026" }, { "model": "nuc7i7bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "rybdwi35.86a.0366" }, { "model": "nuc7i5bnk", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "ccsklm5v.86a.0052" }, { "model": "nuc7i5bnk", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "bnkbl357.86a.0052" }, { "model": "nuc7i5bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "dnkbli5v.86a.0026" }, { "model": "nuc7i7bnh", "scope": "eq", "trust": 1.0, "vendor": "intel", "version": "dnkbli30.86a.0026" }, { "model": "nuc kit nuc7i3bnh", "scope": null, "trust": 0.8, "vendor": "intel", "version": null }, { "model": "nuc kit nuc7i3bnk", "scope": null, "trust": 0.8, "vendor": "intel", "version": null }, { "model": "nuc kit nuc7i5bnh", "scope": null, "trust": 0.8, "vendor": "intel", "version": null }, { "model": "nuc kit nuc7i5bnk", "scope": null, "trust": 0.8, "vendor": "intel", "version": null }, { "model": "nuc kit nuc7i7bnh", "scope": null, "trust": 0.8, "vendor": "intel", "version": null }, { "model": "nuc7i7bnh bn0049", "scope": null, "trust": 0.3, "vendor": "intel", "version": null }, { "model": "nuc7i5bnk bn0049", "scope": null, "trust": 0.3, "vendor": "intel", "version": null }, { "model": "nuc7i5bnh bn0049", "scope": null, "trust": 0.3, "vendor": "intel", "version": null }, { "model": "nuc7i3bnk bn0049", "scope": null, "trust": 0.3, "vendor": "intel", "version": null }, { "model": "nuc7i3bnh bn0049", "scope": null, "trust": 0.3, "vendor": "intel", "version": null } ], "sources": [ { "db": "CNVD", "id": "CNVD-2017-30427" }, { "db": "CNVD", "id": "CNVD-2017-30486" }, { "db": "CNVD", "id": "CNVD-2017-30485" }, { "db": "CNVD", "id": "CNVD-2017-30481" }, { "db": "BID", "id": "101241" }, { "db": "JVNDB", "id": "JVNDB-2017-009420" }, { "db": "NVD", "id": "CVE-2017-5700" }, { "db": "CNNVD", "id": "CNNVD-201710-119" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "children": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:intel:nuc7i7bnh_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i7bnh_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i7bnh_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i7bnh_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i7bnh_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i7bnh_firmware:syskli35.86a.0062:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i7bnh_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i7bnh_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i7bnh_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i7bnh_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:h:intel:nuc7i7bnh:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false } ], "operator": "OR" } ], "cpe_match": [], "operator": "AND" }, { "children": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:intel:nuc7i5bnh_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i5bnh_firmware:syskli35.86a.0062:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i5bnh_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i5bnh_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i5bnh_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i5bnh_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i5bnh_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i5bnh_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i5bnh_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i5bnh_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:h:intel:nuc7i5bnh:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false } ], "operator": "OR" } ], "cpe_match": [], "operator": "AND" }, { "children": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:intel:nuc7i5bnk_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i5bnk_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i5bnk_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i5bnk_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i5bnk_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i5bnk_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i5bnk_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i5bnk_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i5bnk_firmware:syskli35.86a.0062:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i5bnk_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:h:intel:nuc7i5bnk:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false } ], "operator": "OR" } ], "cpe_match": [], "operator": "AND" }, { "children": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:intel:nuc7i3bnh_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i3bnh_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i3bnh_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i3bnh_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i3bnh_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i3bnh_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i3bnh_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i3bnh_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i3bnh_firmware:syskli35.86a.0062:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i3bnh_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:h:intel:nuc7i3bnh:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false } ], "operator": "OR" } ], "cpe_match": [], "operator": "AND" }, { "children": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:intel:nuc7i3bnk_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i3bnk_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i3bnk_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i3bnk_firmware:syskli35.86a.0062:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i3bnk_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i3bnk_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i3bnk_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i3bnk_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i3bnk_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:intel:nuc7i3bnk_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:h:intel:nuc7i3bnk:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false } ], "operator": "OR" } ], "cpe_match": [], "operator": "AND" } ] } ], "sources": [ { "db": "NVD", "id": "CVE-2017-5700" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Nikolaj Schlej", "sources": [ { "db": "BID", "id": "101241" } ], "trust": 0.3 }, "cve": "CVE-2017-5700", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "acInsufInfo": false, "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "author": "NVD", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "exploitabilityScore": 3.9, "impactScore": 10.0, "integrityImpact": "COMPLETE", "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "trust": 1.0, "userInteractionRequired": false, "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0" }, { "acInsufInfo": null, "accessComplexity": "Low", "accessVector": "Local", "authentication": "None", "author": "NVD", "availabilityImpact": "Complete", "baseScore": 7.2, "confidentialityImpact": "Complete", "exploitabilityScore": null, "id": "CVE-2017-5700", "impactScore": null, "integrityImpact": "Complete", "obtainAllPrivilege": null, "obtainOtherPrivilege": null, "obtainUserPrivilege": null, "severity": "High", "trust": 0.8, "userInteractionRequired": null, "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0" }, { "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "author": "CNVD", "availabilityImpact": "PARTIAL", "baseScore": 4.4, "confidentialityImpact": "PARTIAL", "exploitabilityScore": 3.4, "id": "CNVD-2017-30427", "impactScore": 6.4, "integrityImpact": "PARTIAL", "severity": "MEDIUM", "trust": 0.6, "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "author": "CNVD", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "exploitabilityScore": 3.9, "id": "CNVD-2017-30486", "impactScore": 6.4, "integrityImpact": "PARTIAL", "severity": "MEDIUM", "trust": 0.6, "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, { "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "author": "CNVD", "availabilityImpact": "PARTIAL", "baseScore": 4.4, "confidentialityImpact": "PARTIAL", "exploitabilityScore": 3.4, "id": "CNVD-2017-30485", "impactScore": 6.4, "integrityImpact": "PARTIAL", "severity": "MEDIUM", "trust": 0.6, "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "author": "CNVD", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "exploitabilityScore": 3.9, "id": "CNVD-2017-30481", "impactScore": 6.4, "integrityImpact": "PARTIAL", "severity": "MEDIUM", "trust": 0.6, "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "author": "VULHUB", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "exploitabilityScore": 3.9, "id": "VHN-113903", "impactScore": 10.0, "integrityImpact": "COMPLETE", "severity": "HIGH", "trust": 0.1, "vectorString": "AV:L/AC:L/AU:N/C:C/I:C/A:C", "version": "2.0" } ], "cvssV3": [ { "attackComplexity": "LOW", "attackVector": "LOCAL", "author": "NVD", "availabilityImpact": "HIGH", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "exploitabilityScore": 2.5, "impactScore": 5.9, "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "trust": 1.0, "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, { "attackComplexity": "Low", "attackVector": "Local", "author": "NVD", "availabilityImpact": "High", "baseScore": 8.4, "baseSeverity": "High", "confidentialityImpact": "High", "exploitabilityScore": null, "id": "CVE-2017-5700", "impactScore": null, "integrityImpact": "High", "privilegesRequired": "None", "scope": "Unchanged", "trust": 0.8, "userInteraction": "None", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" } ], "severity": [ { "author": "NVD", "id": "CVE-2017-5700", "trust": 1.8, "value": "HIGH" }, { "author": "CNVD", "id": "CNVD-2017-30427", "trust": 0.6, "value": "MEDIUM" }, { "author": "CNVD", "id": "CNVD-2017-30486", "trust": 0.6, "value": "MEDIUM" }, { "author": "CNVD", "id": "CNVD-2017-30485", "trust": 0.6, "value": "MEDIUM" }, { "author": "CNVD", "id": "CNVD-2017-30481", "trust": 0.6, "value": "MEDIUM" }, { "author": "CNNVD", "id": "CNNVD-201710-119", "trust": 0.6, "value": "HIGH" }, { "author": "VULHUB", "id": "VHN-113903", "trust": 0.1, "value": "HIGH" } ] } ], "sources": [ { "db": "CNVD", "id": "CNVD-2017-30427" }, { "db": "CNVD", "id": "CNVD-2017-30486" }, { "db": "CNVD", "id": "CNVD-2017-30485" }, { "db": "CNVD", "id": "CNVD-2017-30481" }, { "db": "VULHUB", "id": "VHN-113903" }, { "db": "JVNDB", "id": "JVNDB-2017-009420" }, { "db": "NVD", "id": "CVE-2017-5700" }, { "db": "CNNVD", "id": "CNNVD-201710-119" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Insufficient protection of password storage in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to bypass Administrator and User passwords via access to password storage. Intel NUC7i3BNK , NUC7i3BNH , NUC7i5BNK , NUC7i5BNH ,and NUC7i7BNH Vulnerabilities related to certificate and password management exist in the firmware.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. IntelBootgaurd has a local security bypass vulnerability that can be exploited by local attackers to bypass certain security restrictions. IntelNUC7i3BNK and other products are CPU (Central Processing Unit) products of Intel Corporation of the United States. A privilege elevation vulnerability exists in system firmware in several Intel products due to insufficient verification input by the program. An attacker could exploit the vulnerability to exploit arbitrary code by manipulating memory. Intel NUC is a powerful 4x4 inch micro PC with entertainment, gaming and work features, a customizable motherboard that supports all the memory, storage and operating systems you need. Multiple Intel products are prone to a local information-disclosure vulnerability. \nAttackers can exploit this issue to obtain sensitive information that may aid in further attacks. Intel NUC7i3BNK, etc. The following products and versions are affected: NUC7i3BNK BN0049 and earlier; NUC7i3BNH BN0049 and earlier; NUC7i5BNK BN0049 and earlier; NUC7i5BNH BN0049 and earlier; NUC7i7BNH BN0049 and earlier", "sources": [ { "db": "NVD", "id": "CVE-2017-5700" }, { "db": "JVNDB", "id": "JVNDB-2017-009420" }, { "db": "CNVD", "id": "CNVD-2017-30427" }, { "db": "CNVD", "id": "CNVD-2017-30486" }, { "db": "CNVD", "id": "CNVD-2017-30485" }, { "db": "CNVD", "id": "CNVD-2017-30481" }, { "db": "BID", "id": "101241" }, { "db": "VULHUB", "id": "VHN-113903" } ], "trust": 4.14 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2017-5700", "trust": 5.2 }, { "db": "BID", "id": "101241", "trust": 2.6 }, { "db": "JVNDB", "id": "JVNDB-2017-009420", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-201710-119", "trust": 0.7 }, { "db": "BID", "id": "101236", "trust": 0.6 }, { "db": "CNVD", "id": "CNVD-2017-30427", "trust": 0.6 }, { "db": "CNVD", "id": "CNVD-2017-30486", "trust": 0.6 }, { "db": "BID", "id": "101257", "trust": 0.6 }, { "db": "CNVD", "id": "CNVD-2017-30485", "trust": 0.6 }, { "db": "CNVD", "id": "CNVD-2017-30481", "trust": 0.6 }, { "db": "VULHUB", "id": "VHN-113903", "trust": 0.1 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2017-30427" }, { "db": "CNVD", "id": "CNVD-2017-30486" }, { "db": "CNVD", "id": "CNVD-2017-30485" }, { "db": "CNVD", "id": "CNVD-2017-30481" }, { "db": "VULHUB", "id": "VHN-113903" }, { "db": "BID", "id": "101241" }, { "db": "JVNDB", "id": "JVNDB-2017-009420" }, { "db": "NVD", "id": "CVE-2017-5700" }, { "db": "CNNVD", "id": "CNNVD-201710-119" } ] }, "id": "VAR-201710-0954", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "CNVD", "id": "CNVD-2017-30427" }, { "db": "CNVD", "id": "CNVD-2017-30486" }, { "db": "CNVD", "id": "CNVD-2017-30485" }, { "db": "CNVD", "id": "CNVD-2017-30481" }, { "db": "VULHUB", "id": "VHN-113903" } ], "trust": 3.0908091914285714 }, "iot_taxonomy": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "category": [ "Network device" ], "sub_category": null, "trust": 2.4 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2017-30427" }, { "db": "CNVD", "id": "CNVD-2017-30486" }, { "db": "CNVD", "id": "CNVD-2017-30485" }, { "db": "CNVD", "id": "CNVD-2017-30481" } ] }, "last_update_date": "2023-12-18T12:37:10.084000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "INTEL-SA-00084", "trust": 0.8, "url": "https://security-center.intel.com/advisory.aspx?intelid=intel-sa-00084\u0026languageid=en-fr" }, { "title": "IntelBootgaurd local security bypass vulnerability patch", "trust": 0.6, "url": "https://www.cnvd.org.cn/patchinfo/show/103840" }, { "title": "Intel NUC Suite SMM Privilege Escalation Vulnerability Patch", "trust": 0.6, "url": "https://www.cnvd.org.cn/patchinfo/show/103860" }, { "title": "IntelSPIWriteProtection local security bypass vulnerability patch", "trust": 0.6, "url": "https://www.cnvd.org.cn/patchinfo/show/103862" }, { "title": "Intel NUC Suite Password Bypass Vulnerability Patch", "trust": 0.6, "url": "https://www.cnvd.org.cn/patchinfo/show/103866" }, { "title": "Multiple Intel Product security vulnerabilities", "trust": 0.6, "url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=75311" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2017-30427" }, { "db": "CNVD", "id": "CNVD-2017-30486" }, { "db": "CNVD", "id": "CNVD-2017-30485" }, { "db": "CNVD", "id": "CNVD-2017-30481" }, { "db": "JVNDB", "id": "JVNDB-2017-009420" }, { "db": "CNNVD", "id": "CNNVD-201710-119" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-522", "trust": 1.1 }, { "problemtype": "CWE-255", "trust": 0.9 } ], "sources": [ { "db": "VULHUB", "id": "VHN-113903" }, { "db": "JVNDB", "id": "JVNDB-2017-009420" }, { "db": "NVD", "id": "CVE-2017-5700" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 3.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2017-5700" }, { "trust": 1.9, "url": "https://security-center.intel.com/advisory.aspx?intelid=intel-sa-00084\u0026languageid=en-fr" }, { "trust": 1.7, "url": "http://www.securityfocus.com/bid/101241" }, { "trust": 0.8, "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-5700" }, { "trust": 0.3, "url": "http://www.intel.com/content/www/us/en/homepage.html" }, { "trust": 0.1, "url": "https://security-center.intel.com/advisory.aspx?intelid=intel-sa-00084\u0026amp;languageid=en-fr" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2017-30427" }, { "db": "CNVD", "id": "CNVD-2017-30486" }, { "db": "CNVD", "id": "CNVD-2017-30485" }, { "db": "CNVD", "id": "CNVD-2017-30481" }, { "db": "VULHUB", "id": "VHN-113903" }, { "db": "BID", "id": "101241" }, { "db": "JVNDB", "id": "JVNDB-2017-009420" }, { "db": "NVD", "id": "CVE-2017-5700" }, { "db": "CNNVD", "id": "CNNVD-201710-119" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "CNVD", "id": "CNVD-2017-30427" }, { "db": "CNVD", "id": "CNVD-2017-30486" }, { "db": "CNVD", "id": "CNVD-2017-30485" }, { "db": "CNVD", "id": "CNVD-2017-30481" }, { "db": "VULHUB", "id": "VHN-113903" }, { "db": "BID", "id": "101241" }, { "db": "JVNDB", "id": "JVNDB-2017-009420" }, { "db": "NVD", "id": "CVE-2017-5700" }, { "db": "CNNVD", "id": "CNNVD-201710-119" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2017-10-17T00:00:00", "db": "CNVD", "id": "CNVD-2017-30427" }, { "date": "2017-10-18T00:00:00", "db": "CNVD", "id": "CNVD-2017-30486" }, { "date": "2017-10-18T00:00:00", "db": "CNVD", "id": "CNVD-2017-30485" }, { "date": "2017-10-18T00:00:00", "db": "CNVD", "id": "CNVD-2017-30481" }, { "date": "2017-10-11T00:00:00", "db": "VULHUB", "id": "VHN-113903" }, { "date": "2017-10-06T00:00:00", "db": "BID", "id": "101241" }, { "date": "2017-11-10T00:00:00", "db": "JVNDB", "id": "JVNDB-2017-009420" }, { "date": "2017-10-11T00:29:00.207000", "db": "NVD", "id": "CVE-2017-5700" }, { "date": "2017-10-11T00:00:00", "db": "CNNVD", "id": "CNNVD-201710-119" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2017-10-17T00:00:00", "db": "CNVD", "id": "CNVD-2017-30427" }, { "date": "2017-10-18T00:00:00", "db": "CNVD", "id": "CNVD-2017-30486" }, { "date": "2017-10-18T00:00:00", "db": "CNVD", "id": "CNVD-2017-30485" }, { "date": "2017-10-18T00:00:00", "db": "CNVD", "id": "CNVD-2017-30481" }, { "date": "2019-10-03T00:00:00", "db": "VULHUB", "id": "VHN-113903" }, { "date": "2017-10-06T00:00:00", "db": "BID", "id": "101241" }, { "date": "2017-11-10T00:00:00", "db": "JVNDB", "id": "JVNDB-2017-009420" }, { "date": "2019-10-03T00:03:26.223000", "db": "NVD", "id": "CVE-2017-5700" }, { "date": "2019-10-23T00:00:00", "db": "CNNVD", "id": "CNNVD-201710-119" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "local", "sources": [ { "db": "BID", "id": "101241" }, { "db": "CNNVD", "id": "CNNVD-201710-119" } ], "trust": 0.9 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "plural Intel NUC Kit Vulnerabilities related to certificate and password management in product firmware", "sources": [ { "db": "JVNDB", "id": "JVNDB-2017-009420" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "trust management problem", "sources": [ { "db": "CNNVD", "id": "CNNVD-201710-119" } ], "trust": 0.6 } }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.