CVE-2017-5721 : Insufficient input validation in system firmware for Intel NUC7i3BNK, NUC7i3BNH,

Insufficient input validation in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to execute arbitrary code via manipulation of memory.

Published 2017-10-11 00:29:00

Updated 2017-11-03 17:54:27

Source Intel Corporation

View at NVD, CVE.org

Vulnerability category: Input validationExecute code

Products affected by CVE-2017-5721

Intel » Nuc7i7bnh Firmware » Version: Ccsklm5v.86a.0052
cpe:2.3:o:intel:nuc7i7bnh_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i7bnh » Version: N/A
Intel » Nuc7i7bnh Firmware » Version: Ccsklm30.86a.0052
cpe:2.3:o:intel:nuc7i7bnh_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i7bnh » Version: N/A
Intel » Nuc7i7bnh Firmware » Version: Rybdwi35.86a.0366
cpe:2.3:o:intel:nuc7i7bnh_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i7bnh » Version: N/A
Intel » Nuc7i7bnh Firmware » Version: Tybyt20h.86a.0015
cpe:2.3:o:intel:nuc7i7bnh_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i7bnh » Version: N/A
Intel » Nuc7i7bnh Firmware » Version: Bnkbl357.86a.0052
cpe:2.3:o:intel:nuc7i7bnh_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i7bnh » Version: N/A
Intel » Nuc7i7bnh Firmware » Version: Ayaplcel.86a.0041
cpe:2.3:o:intel:nuc7i7bnh_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i7bnh » Version: N/A
Intel » Nuc7i7bnh Firmware » Version: Kyskli70.86a.0050
cpe:2.3:o:intel:nuc7i7bnh_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i7bnh » Version: N/A
Intel » Nuc7i7bnh Firmware » Version: Dnkbli5v.86a.0026
cpe:2.3:o:intel:nuc7i7bnh_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i7bnh » Version: N/A
Intel » Nuc7i7bnh Firmware » Version: Syskli35.86a.0062
cpe:2.3:o:intel:nuc7i7bnh_firmware:syskli35.86a.0062:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i7bnh » Version: N/A
Intel » Nuc7i7bnh Firmware » Version: Dnkbli30.86a.0026
cpe:2.3:o:intel:nuc7i7bnh_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i7bnh » Version: N/A
Intel » Nuc7i5bnh Firmware » Version: Tybyt20h.86a.0015
cpe:2.3:o:intel:nuc7i5bnh_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i5bnh » Version: N/A
Intel » Nuc7i5bnh Firmware » Version: Bnkbl357.86a.0052
cpe:2.3:o:intel:nuc7i5bnh_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i5bnh » Version: N/A
Intel » Nuc7i5bnh Firmware » Version: Dnkbli30.86a.0026
cpe:2.3:o:intel:nuc7i5bnh_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i5bnh » Version: N/A
Intel » Nuc7i5bnh Firmware » Version: Dnkbli5v.86a.0026
cpe:2.3:o:intel:nuc7i5bnh_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i5bnh » Version: N/A
Intel » Nuc7i5bnh Firmware » Version: Ayaplcel.86a.0041
cpe:2.3:o:intel:nuc7i5bnh_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i5bnh » Version: N/A
Intel » Nuc7i5bnh Firmware » Version: Syskli35.86a.0062
cpe:2.3:o:intel:nuc7i5bnh_firmware:syskli35.86a.0062:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i5bnh » Version: N/A
Intel » Nuc7i5bnh Firmware » Version: Kyskli70.86a.0050
cpe:2.3:o:intel:nuc7i5bnh_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i5bnh » Version: N/A
Intel » Nuc7i5bnh Firmware » Version: Ccsklm30.86a.0052
cpe:2.3:o:intel:nuc7i5bnh_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i5bnh » Version: N/A
Intel » Nuc7i5bnh Firmware » Version: Ccsklm5v.86a.0052
cpe:2.3:o:intel:nuc7i5bnh_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i5bnh » Version: N/A
Intel » Nuc7i5bnh Firmware » Version: Rybdwi35.86a.0366
cpe:2.3:o:intel:nuc7i5bnh_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i5bnh » Version: N/A
Intel » Nuc7i5bnk Firmware » Version: Dnkbli5v.86a.0026
cpe:2.3:o:intel:nuc7i5bnk_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i5bnk » Version: N/A
Intel » Nuc7i5bnk Firmware » Version: Syskli35.86a.0062
cpe:2.3:o:intel:nuc7i5bnk_firmware:syskli35.86a.0062:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i5bnk » Version: N/A
Intel » Nuc7i5bnk Firmware » Version: Kyskli70.86a.0050
cpe:2.3:o:intel:nuc7i5bnk_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i5bnk » Version: N/A
Intel » Nuc7i5bnk Firmware » Version: Ccsklm5v.86a.0052
cpe:2.3:o:intel:nuc7i5bnk_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i5bnk » Version: N/A
Intel » Nuc7i5bnk Firmware » Version: Ccsklm30.86a.0052
cpe:2.3:o:intel:nuc7i5bnk_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i5bnk » Version: N/A
Intel » Nuc7i5bnk Firmware » Version: Tybyt20h.86a.0015
cpe:2.3:o:intel:nuc7i5bnk_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i5bnk » Version: N/A
Intel » Nuc7i5bnk Firmware » Version: Dnkbli30.86a.0026
cpe:2.3:o:intel:nuc7i5bnk_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i5bnk » Version: N/A
Intel » Nuc7i5bnk Firmware » Version: Ayaplcel.86a.0041
cpe:2.3:o:intel:nuc7i5bnk_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i5bnk » Version: N/A
Intel » Nuc7i5bnk Firmware » Version: Rybdwi35.86a.0366
cpe:2.3:o:intel:nuc7i5bnk_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i5bnk » Version: N/A
Intel » Nuc7i5bnk Firmware » Version: Bnkbl357.86a.0052
cpe:2.3:o:intel:nuc7i5bnk_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i5bnk » Version: N/A
Intel » Nuc7i3bnh Firmware » Version: Ccsklm5v.86a.0052
cpe:2.3:o:intel:nuc7i3bnh_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i3bnh » Version: N/A
Intel » Nuc7i3bnh Firmware » Version: Ccsklm30.86a.0052
cpe:2.3:o:intel:nuc7i3bnh_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i3bnh » Version: N/A
Intel » Nuc7i3bnh Firmware » Version: Rybdwi35.86a.0366
cpe:2.3:o:intel:nuc7i3bnh_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i3bnh » Version: N/A
Intel » Nuc7i3bnh Firmware » Version: Tybyt20h.86a.0015
cpe:2.3:o:intel:nuc7i3bnh_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i3bnh » Version: N/A
Intel » Nuc7i3bnh Firmware » Version: Syskli35.86a.0062
cpe:2.3:o:intel:nuc7i3bnh_firmware:syskli35.86a.0062:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i3bnh » Version: N/A
Intel » Nuc7i3bnh Firmware » Version: Dnkbli30.86a.0026
cpe:2.3:o:intel:nuc7i3bnh_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i3bnh » Version: N/A
Intel » Nuc7i3bnh Firmware » Version: Ayaplcel.86a.0041
cpe:2.3:o:intel:nuc7i3bnh_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i3bnh » Version: N/A
Intel » Nuc7i3bnh Firmware » Version: Kyskli70.86a.0050
cpe:2.3:o:intel:nuc7i3bnh_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i3bnh » Version: N/A
Intel » Nuc7i3bnh Firmware » Version: Bnkbl357.86a.0052
cpe:2.3:o:intel:nuc7i3bnh_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i3bnh » Version: N/A
Intel » Nuc7i3bnh Firmware » Version: Dnkbli5v.86a.0026
cpe:2.3:o:intel:nuc7i3bnh_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i3bnh » Version: N/A
Intel » Nuc7i3bnk Firmware » Version: Ayaplcel.86a.0041
cpe:2.3:o:intel:nuc7i3bnk_firmware:ayaplcel.86a.0041:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i3bnk » Version: N/A
Intel » Nuc7i3bnk Firmware » Version: Syskli35.86a.0062
cpe:2.3:o:intel:nuc7i3bnk_firmware:syskli35.86a.0062:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i3bnk » Version: N/A
Intel » Nuc7i3bnk Firmware » Version: Tybyt20h.86a.0015
cpe:2.3:o:intel:nuc7i3bnk_firmware:tybyt20h.86a.0015:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i3bnk » Version: N/A
Intel » Nuc7i3bnk Firmware » Version: Bnkbl357.86a.0052
cpe:2.3:o:intel:nuc7i3bnk_firmware:bnkbl357.86a.0052:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i3bnk » Version: N/A
Intel » Nuc7i3bnk Firmware » Version: Dnkbli30.86a.0026
cpe:2.3:o:intel:nuc7i3bnk_firmware:dnkbli30.86a.0026:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i3bnk » Version: N/A
Intel » Nuc7i3bnk Firmware » Version: Dnkbli5v.86a.0026
cpe:2.3:o:intel:nuc7i3bnk_firmware:dnkbli5v.86a.0026:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i3bnk » Version: N/A
Intel » Nuc7i3bnk Firmware » Version: Ccsklm5v.86a.0052
cpe:2.3:o:intel:nuc7i3bnk_firmware:ccsklm5v.86a.0052:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i3bnk » Version: N/A
Intel » Nuc7i3bnk Firmware » Version: Rybdwi35.86a.0366
cpe:2.3:o:intel:nuc7i3bnk_firmware:rybdwi35.86a.0366:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i3bnk » Version: N/A
Intel » Nuc7i3bnk Firmware » Version: Kyskli70.86a.0050
cpe:2.3:o:intel:nuc7i3bnk_firmware:kyskli70.86a.0050:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i3bnk » Version: N/A
Intel » Nuc7i3bnk Firmware » Version: Ccsklm30.86a.0052
cpe:2.3:o:intel:nuc7i3bnk_firmware:ccsklm30.86a.0052:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i3bnk » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2017-5721

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 24 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-5721

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.4	MEDIUM	AV:L/AC:M/Au:N/C:P/I:P/A:P	3.4	6.4	NIST
Access Vector: Local Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
7.5	HIGH	CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H	0.8	6.0	NIST
Attack Vector: Local Attack Complexity: High Privileges Required: High User Interaction: None Scope: Changed Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2017-5721

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2017-5721

https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languageid=en-fr

INTEL-SA-00084
Patch;Third Party Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2017-5721

Products affected by CVE-2017-5721

Exploit prediction scoring system (EPSS) score for CVE-2017-5721

CVSS scores for CVE-2017-5721

CWE ids for CVE-2017-5721

References for CVE-2017-5721