PT-2017-16679 · Intel · Intel Nuc

Publicado 2017-10-11 · Atualizado 2019-10-03 · CVE-2017-5700

Positive Technologies (AI Summary)

CVSS v3.1

8.4

Alta

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel NUC versions BN0049 and below

Description The issue is related to insufficient protection of password storage in system firmware, allowing local attackers to bypass Administrator and User passwords via access to password storage. This could potentially affect a significant number of devices, although the exact number is not specified.

Recommendations For Intel NUC versions BN0049 and below, update the system firmware to a version above BN0049 to resolve the issue. As a temporary workaround, consider restricting physical access to the devices to minimize the risk of exploitation.

Correção

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

Identificadores relacionados

CVE-2017-5700

Produtos afetados

Intel Nuc

Referências · 4

• http://securityfocus.com/bid/101241 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-5700 · Nota de Segurança
• https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languageid=en-fr · Correção
• https://osv.dev/vulnerability/CVE-2017-5700 · Aviso do Fabricante