CVE-2017-5701: High severity intel nuc mini pc nuc7i7bnh firmware vulnerability

Published Oct 11, 2017

Updated

Insecure platform configuration in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows an attacker with physical presence to run arbitrary code via unauthorized firmware modification during BIOS Recovery.

Affected Software

55 affected components

Intel Nuc7i7bnh Firmware=ayaplcel.86a.0041

Intel Nuc7i7bnh Firmware=bnkbl357.86a.0052

Intel Nuc7i7bnh Firmware=ccsklm5v.86a.0052

Intel Nuc7i7bnh Firmware=ccsklm30.86a.0052

Intel Nuc7i7bnh Firmware=dnkbli5v.86a.0026

Intel Nuc7i7bnh Firmware=dnkbli30.86a.0026

Intel Nuc7i7bnh Firmware=kyskli70.86a.0050

Intel Nuc7i7bnh Firmware=rybdwi35.86a.0366

Intel Nuc7i7bnh Firmware=syskli35.86a.0062

Intel Nuc7i7bnh Firmware=tybyt20h.86a.0015

Intel NUC7i7BNH

Intel Nuc7i5bnh Firmware=ayaplcel.86a.0041

Intel Nuc7i5bnh Firmware=bnkbl357.86a.0052

Intel Nuc7i5bnh Firmware=ccsklm5v.86a.0052

Intel Nuc7i5bnh Firmware=ccsklm30.86a.0052

Intel Nuc7i5bnh Firmware=dnkbli5v.86a.0026

Intel Nuc7i5bnh Firmware=dnkbli30.86a.0026

Intel Nuc7i5bnh Firmware=kyskli70.86a.0050

Intel Nuc7i5bnh Firmware=rybdwi35.86a.0366

Intel Nuc7i5bnh Firmware=syskli35.86a.0062

Intel Nuc7i5bnh Firmware=tybyt20h.86a.0015

Intel NUC7i5BNH

Intel Nuc7i5bnk Firmware=ayaplcel.86a.0041

Intel Nuc7i5bnk Firmware=bnkbl357.86a.0052

Intel Nuc7i5bnk Firmware=ccsklm5v.86a.0052

Intel Nuc7i5bnk Firmware=ccsklm30.86a.0052

Intel Nuc7i5bnk Firmware=dnkbli5v.86a.0026

Intel Nuc7i5bnk Firmware=dnkbli30.86a.0026

Intel Nuc7i5bnk Firmware=kyskli70.86a.0050

Intel Nuc7i5bnk Firmware=rybdwi35.86a.0366

Intel Nuc7i5bnk Firmware=syskli35.86a.0062

Intel Nuc7i5bnk Firmware=tybyt20h.86a.0015

Intel NUC7i5BNK

Intel Nuc7i3bnh Firmware=ayaplcel.86a.0041

Intel Nuc7i3bnh Firmware=bnkbl357.86a.0052

Intel Nuc7i3bnh Firmware=ccsklm5v.86a.0052

Intel Nuc7i3bnh Firmware=ccsklm30.86a.0052

Intel Nuc7i3bnh Firmware=dnkbli5v.86a.0026

Intel Nuc7i3bnh Firmware=dnkbli30.86a.0026

Intel Nuc7i3bnh Firmware=kyskli70.86a.0050

Intel Nuc7i3bnh Firmware=rybdwi35.86a.0366

Intel Nuc7i3bnh Firmware=syskli35.86a.0062

Intel Nuc7i3bnh Firmware=tybyt20h.86a.0015

Intel NUC7i3BNH

Intel Nuc7i3bnk Firmware=ayaplcel.86a.0041

Intel Nuc7i3bnk Firmware=bnkbl357.86a.0052

Intel Nuc7i3bnk Firmware=ccsklm5v.86a.0052

Intel Nuc7i3bnk Firmware=ccsklm30.86a.0052

Intel Nuc7i3bnk Firmware=dnkbli5v.86a.0026

Intel Nuc7i3bnk Firmware=dnkbli30.86a.0026

Intel Nuc7i3bnk Firmware=kyskli70.86a.0050

Intel Nuc7i3bnk Firmware=rybdwi35.86a.0366

Intel Nuc7i3bnk Firmware=syskli35.86a.0062

Intel Nuc7i3bnk Firmware=tybyt20h.86a.0015

Intel NUC7i3BNK

Remediation

Patch Available

https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languageid=en-fr

Event History

Oct 11, 2017

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-5701?

CVE-2017-5701 is classified with a high severity level due to the potential for arbitrary code execution via unauthorized firmware modification.

How do I fix CVE-2017-5701?

To fix CVE-2017-5701, update your Intel NUC firmware to the latest version provided by Intel.

What systems are affected by CVE-2017-5701?

CVE-2017-5701 affects various models of Intel NUC7i3, NUC7i5, and NUC7i7 when running specific firmware versions BN0049 and below.

Can CVE-2017-5701 be exploited remotely?

CVE-2017-5701 requires physical presence for exploitation, making it less likely to be exploited remotely.

What actions should I take if I own an affected Intel NUC device related to CVE-2017-5701?

If you own an affected Intel NUC device, you should immediately update your firmware to mitigate the vulnerability.