NetSight
high8.4

CVE-2017-5700

Insufficient protection of password storage in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows…

Impact

Insufficient protection of password storage in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to bypass Administrator and User passwords via access to password storage.

Affected products

VendorProductAffected versions
IntelNuc7i7bnh Firmware
Versions ayaplcel.86a.0041, bnkbl357.86a.0052, ccsklm5v.86a.0052, ccsklm30.86a.0052, dnkbli5v.86a.0026, dnkbli30.86a.0026
IntelNuc7i5bnh Firmware
Versions ayaplcel.86a.0041, bnkbl357.86a.0052, ccsklm5v.86a.0052, ccsklm30.86a.0052, dnkbli5v.86a.0026, dnkbli30.86a.0026
IntelNuc7i5bnk Firmware
Versions ayaplcel.86a.0041, bnkbl357.86a.0052, ccsklm5v.86a.0052, ccsklm30.86a.0052, dnkbli5v.86a.0026, dnkbli30.86a.0026
IntelNuc7i3bnh Firmware
Versions ayaplcel.86a.0041, bnkbl357.86a.0052, ccsklm5v.86a.0052, ccsklm30.86a.0052, dnkbli5v.86a.0026, dnkbli30.86a.0026
IntelNuc7i3bnk Firmware
Versions ayaplcel.86a.0041, bnkbl357.86a.0052, ccsklm5v.86a.0052, ccsklm30.86a.0052, dnkbli5v.86a.0026, dnkbli30.86a.0026

Weakness classification

References