Advisory Published
Updated

CVE-2017-3718

First published: Thu Jan 10 2019(Updated: )

Improper setting of device configuration in system firmware for Intel(R) NUC kits may allow a privileged user to potentially enable escalation of privilege via physical access.

Credit: secalert_us@oracle.com

Affected SoftwareAffected VersionHow to fix
Intel NUC Kit firmware
Intel NUC Kit D33217GKE
Intel NUC Kit D53427RKE
Intel NUC board D54250WYB
Intel NUC DE3815TYBE Firmware
Intel NUC Kit DN2820FYKH Firmware
Intel NUC Kit NUC5CPYH
Intel NUC kit nuc5i3myhe firmware
Intel NUC5i5MYHE
Intel NUC kit nuc5i7ryh firmware
Intel NUC kit NUC5PGYH firmware
Intel NUC6CAYS Firmware
Intel NUC kit nuc6i5syh firmware
Intel NUC kit nuc6i7kyk firmware
Intel NUC kit NUC7CJYH
Intel NUC kit NUC7i3DNHE firmware
Intel NUC Kit NUC7i5DNKE Firmware
Intel NUC NUC7i7BNH
Intel NUC NUC7i7DNKE
Intel NUC 8i7 HNK
Intel Compute Card Firmware
Intel CD1IV128MK Firmware
Intel Compute Card Firmware
Intel Compute Card Firmware
Intel Compute Stick Firmware
Intel Compute Stick STCK1A32WFC Firmware
Intel Compute Stick STK1AW32SC Firmware
Intel Compute Stick STK2M3W64CC Firmware
Intel Compute Stick Firmware

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is CVE-2017-3718?

    CVE-2017-3718 is a vulnerability that allows a privileged user to potentially enable escalation of privilege via physical access to Intel(R) NUC kits.

  • What software is affected by CVE-2017-3718?

    Intel Nuc Kit Firmware is affected by CVE-2017-3718.

  • What is the severity of CVE-2017-3718?

    CVE-2017-3718 has a severity rating of 6.2 (medium).

  • How can I fix CVE-2017-3718?

    To fix CVE-2017-3718, update the system firmware for Intel NUC kits to the latest version.

  • Where can I find more information about CVE-2017-3718?

    You can find more information about CVE-2017-3718 at the Intel Security Center advisory: https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00144.html

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203