CVE-2017-5700
N/A
Published: October 11, 2017 at 12:00 AM UTC
Updated: June 17, 2026 at 01:21 AM UTC
11 products affected across 1 vendorNUC7I7BNH FirmwareNUC7I3BNH FirmwareNUC7I5BNK Firmware
Using NUC Kits by Intel Corporation?
Get instant alerts when new vulnerabilities affect NUC Kits - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.4%
Description
Insufficient protection of password storage in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to bypass Administrator and User passwords via access to password storage.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
ayaplcel.86a.0041bnkbl357.86a.0052ccsklm30.86a.0052ccsklm5v.86a.0052dnkbli30.86a.0026dnkbli5v.86a.0026kyskli70.86a.0050rybdwi35.86a.0366syskli35.86a.0062tybyt20h.86a.0015
intel-nuc7i3bnh (same device)
ayaplcel.86a.0041bnkbl357.86a.0052ccsklm30.86a.0052ccsklm5v.86a.0052dnkbli30.86a.0026dnkbli5v.86a.0026kyskli70.86a.0050rybdwi35.86a.0366syskli35.86a.0062tybyt20h.86a.0015
intel-nuc7i3bnk (same device)
ayaplcel.86a.0041bnkbl357.86a.0052ccsklm30.86a.0052ccsklm5v.86a.0052dnkbli30.86a.0026dnkbli5v.86a.0026kyskli70.86a.0050rybdwi35.86a.0366syskli35.86a.0062tybyt20h.86a.0015
intel-nuc7i5bnh (same device)
ayaplcel.86a.0041bnkbl357.86a.0052ccsklm30.86a.0052ccsklm5v.86a.0052dnkbli30.86a.0026dnkbli5v.86a.0026kyskli70.86a.0050rybdwi35.86a.0366syskli35.86a.0062tybyt20h.86a.0015
intel-nuc7i5bnk (same device)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (2)
VDB Entryx_refsource_BIDThird Party Advisory
Source: [email protected]
http://www.securityfocus.com/bid/101241x_refsource_CONFIRMPatchThird Party Advisory
Source: [email protected]
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languageid=en-frQuick Info
StatusMODIFIED
CWE
CWE-522
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card