Lucene search

IntelCVE-2017-5686

HistoryApr 03, 2017 - 9:59 p.m.

CVE-2017-5686

2017-04-0321:59:00

CWE-276

intel

web.nvd.nist.gov

cve-2017-5686

bios

intel nuc

6th gen intel core processors

security vulnerability

nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

3.9

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

4.3

Confidence

High

EPSS

Percentile

12.6%

JSON

The BIOS in Intel NUC systems based on 6th Gen Intel Core processors prior to version SY0059 may allow may allow an attacker with physical access to the system to gain access to personal information.

Affected configurations

Nvd

Node

intelnuc6i3syh_biosRange≤syskli35.86a.0057.2017.0119.1758

AND

intelnuc6i5syhMatch-

Node

intelnuc6i3syk_biosRange≤syskli35.86a.0057.2017.0119.1758

AND

intelnuc6i3sykMatch-

VendorProductVersionCPE
intelnuc6i3syh_bios*cpe:2.3:o:intel:nuc6i3syh_bios:*:*:*:*:*:*:*:*
intelnuc6i5syh-cpe:2.3:h:intel:nuc6i5syh:-:*:*:*:*:*:*:*
intelnuc6i3syk_bios*cpe:2.3:o:intel:nuc6i3syk_bios:*:*:*:*:*:*:*:*
intelnuc6i3syk-cpe:2.3:h:intel:nuc6i3syk:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
intel	nuc6i3syh_bios	*	cpe:2.3:o:intel:nuc6i3syh_bios::::::::
intel	nuc6i5syh	-	cpe:2.3:h:intel:nuc6i5syh:-:::::::*
intel	nuc6i3syk_bios	*	cpe:2.3:o:intel:nuc6i3syk_bios::::::::
intel	nuc6i3syk	-	cpe:2.3:h:intel:nuc6i3syk:-:::::::*

CNA Affected

[
  {
    "product": "Intel NUC NUC6i5SYSH/K, Intel NUC6i3SYSH/K",
    "vendor": "Intel",
    "versions": [
      {
        "status": "affected",
        "version": "Before SY0059"
      }
    ]
  }
]

References

security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00073&languageid=en-fr

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

3.9

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

4.3

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2017-5686