CVE-2017-5722: High severity intel nuc mini pc nuc7i7bnh firmware vulnerability

Published Oct 11, 2017

Updated

Incorrect policy enforcement in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows attackers with local or physical access to bypass enforcement of integrity protections via manipulation of firmware storage.

Affected Software

55 affected components

Intel Nuc7i7bnh Firmware=ayaplcel.86a.0041

Intel Nuc7i7bnh Firmware=bnkbl357.86a.0052

Intel Nuc7i7bnh Firmware=ccsklm5v.86a.0052

Intel Nuc7i7bnh Firmware=ccsklm30.86a.0052

Intel Nuc7i7bnh Firmware=dnkbli5v.86a.0026

Intel Nuc7i7bnh Firmware=dnkbli30.86a.0026

Intel Nuc7i7bnh Firmware=kyskli70.86a.0050

Intel Nuc7i7bnh Firmware=rybdwi35.86a.0366

Intel Nuc7i7bnh Firmware=syskli35.86a.0062

Intel Nuc7i7bnh Firmware=tybyt20h.86a.0015

Intel NUC7i7BNH

Intel Nuc7i5bnh Firmware=ayaplcel.86a.0041

Intel Nuc7i5bnh Firmware=bnkbl357.86a.0052

Intel Nuc7i5bnh Firmware=ccsklm5v.86a.0052

Intel Nuc7i5bnh Firmware=ccsklm30.86a.0052

Intel Nuc7i5bnh Firmware=dnkbli5v.86a.0026

Intel Nuc7i5bnh Firmware=dnkbli30.86a.0026

Intel Nuc7i5bnh Firmware=kyskli70.86a.0050

Intel Nuc7i5bnh Firmware=rybdwi35.86a.0366

Intel Nuc7i5bnh Firmware=syskli35.86a.0062

Intel Nuc7i5bnh Firmware=tybyt20h.86a.0015

Intel NUC7i5BNH

Intel Nuc7i5bnk Firmware=ayaplcel.86a.0041

Intel Nuc7i5bnk Firmware=bnkbl357.86a.0052

Intel Nuc7i5bnk Firmware=ccsklm5v.86a.0052

Intel Nuc7i5bnk Firmware=ccsklm30.86a.0052

Intel Nuc7i5bnk Firmware=dnkbli5v.86a.0026

Intel Nuc7i5bnk Firmware=dnkbli30.86a.0026

Intel Nuc7i5bnk Firmware=kyskli70.86a.0050

Intel Nuc7i5bnk Firmware=rybdwi35.86a.0366

Intel Nuc7i5bnk Firmware=syskli35.86a.0062

Intel Nuc7i5bnk Firmware=tybyt20h.86a.0015

Intel NUC7i5BNK

Intel Nuc7i3bnh Firmware=ayaplcel.86a.0041

Intel Nuc7i3bnh Firmware=bnkbl357.86a.0052

Intel Nuc7i3bnh Firmware=ccsklm5v.86a.0052

Intel Nuc7i3bnh Firmware=ccsklm30.86a.0052

Intel Nuc7i3bnh Firmware=dnkbli5v.86a.0026

Intel Nuc7i3bnh Firmware=dnkbli30.86a.0026

Intel Nuc7i3bnh Firmware=kyskli70.86a.0050

Intel Nuc7i3bnh Firmware=rybdwi35.86a.0366

Intel Nuc7i3bnh Firmware=syskli35.86a.0062

Intel Nuc7i3bnh Firmware=tybyt20h.86a.0015

Intel NUC7i3BNH

Intel Nuc7i3bnk Firmware=ayaplcel.86a.0041

Intel Nuc7i3bnk Firmware=bnkbl357.86a.0052

Intel Nuc7i3bnk Firmware=ccsklm5v.86a.0052

Intel Nuc7i3bnk Firmware=ccsklm30.86a.0052

Intel Nuc7i3bnk Firmware=dnkbli5v.86a.0026

Intel Nuc7i3bnk Firmware=dnkbli30.86a.0026

Intel Nuc7i3bnk Firmware=kyskli70.86a.0050

Intel Nuc7i3bnk Firmware=rybdwi35.86a.0366

Intel Nuc7i3bnk Firmware=syskli35.86a.0062

Intel Nuc7i3bnk Firmware=tybyt20h.86a.0015

Intel NUC7i3BNK

Remediation

Patch Available

https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languageid=en-fr

Event History

Oct 11, 2017

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-5722?

CVE-2017-5722 is categorized as a high severity vulnerability due to its potential to allow local or physical access attackers to bypass integrity protections.

How do I fix CVE-2017-5722?

To fix CVE-2017-5722, users should update their firmware to versions BN0050 or later for affected Intel NUC models.

What are the affected Intel NUC models for CVE-2017-5722?

CVE-2017-5722 affects Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, and NUC7i7BNH firmware versions BN0049 and below.

What type of vulnerability is CVE-2017-5722?

CVE-2017-5722 is an integrity protection bypass vulnerability due to incorrect policy enforcement in system firmware.

Can CVE-2017-5722 be exploited remotely?

No, CVE-2017-5722 requires local or physical access to the affected device to be exploited.