Intel NUC7I5BNK Firmware vulnerabilities

5 CVEs affecting Intel NUC7I5BNK Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-8742, published 2020-08-13.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-5721, published 2017-10-11. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. Insufficient input validation in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to execute arbitrary code via…
• CVE-2017-5700, published 2017-10-11. High severity, CVSS 8.4. EPSS: 0.4% chance of exploitation in the next 30 days. Insufficient protection of password storage in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to bypass Administrator…
• CVE-2017-5722, published 2017-10-11. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Incorrect policy enforcement in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows attackers with local or physical access to bypass…
• CVE-2017-5701, published 2017-10-11. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. Insecure platform configuration in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows an attacker with physical presence to run arbitrary…
• CVE-2020-8742, published 2020-08-13. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. Improper input validation in the firmware for Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.