CVE-2017-5722

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Incorrect policy enforcement in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows attackers with local or physical access to bypass enforcement of integrity protections via manipulation of firmware storage.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

Vendor	Product	Versions
Intel Corporation	NUC Kits	BN0049 and below

References

http://www.securityfocus.com/bid/101236Third Party Advisory, VDB Entry
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languageid=en-frPatch, Third Party Advisory
http://www.securityfocus.com/bid/101236Third Party Advisory, VDB Entry
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languageid=en-frPatch, Third Party Advisory

Timeline

Published: Oct 11, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-57277.8Pointer dereference in subsystem in Intel Graphics Driver 15.40.x.x, 15.45.x.x, 15.46.x.x allows unprivileged user to elevate privileges via CVE-2017-57297.4Frame replay vulnerability in Wi-Fi subsystem in Intel Dual-Band and Tri-Band Wireless-AC Products allows remote attacker to replay frames v CVE-2017-57317.8Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escalation of privilege vi CVE-2017-57368.8An elevation of privilege in Intel Software Guard Extensions Platform Software Component before 1.9.105.42329 allows a local attacker to exe CVE-2017-57389.1Escalation of privilege vulnerability in admin portal for Intel Unite App versions 3.1.32.12, 3.1.41.18 and 3.1.45.26 allows an attacker wit CVE-2017-57535.6Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an at CVE-2017-57545.6Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information CVE-2017-57806.5A remote clickjacking vulnerability in HPE Matrix Operating Environment version v7.6 was found.CVE-2017-57818.8A CSRF vulnerability in HPE Matrix Operating Environment version v7.6 was found.CVE-2017-57825.4A missing HSTS Header vulnerability in HPE Matrix Operating Environment version v7.6 was found.CVE-2017-57835.3A remote clickjacking vulnerability in HPE Matrix Operating Environment version v7.6 was found.CVE-2017-57846.5A missing HSTS Header vulnerability in HPE Matrix Operating Environment version v7.6 was found.