CVE-2017-3718

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2017-3718

6.2 /10

CVSS v3 : MEDIUM

V3 Legend

Vector : AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability : 0.3 / Impact : 5.9

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

4.6 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

I

mproper setting of device configuration in system firmware for Intel(R) NUC kits may allow a privileged user to potentially enable escalation of privilege via physical access.

References
Link Resource
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00144.html Patch Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00144.html Patch Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:intel:nuc_kit_firmware:-:*:*:*:*:*:*:*
OR cpe:2.3:h:intel:nuc_kit_d33217gke:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_kit_d53427rke:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_kit_d54250wyb:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_kit_de3815tybe:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_kit_dn2820fykh:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_kit_nuc5cpyh:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_kit_nuc5i3myhe:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_kit_nuc5i5myhe:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_kit_nuc5i7ryh:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_kit_nuc5pgyh:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_kit_nuc6cays:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_kit_nuc6i5syh:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_kit_nuc6i7kyk:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_kit_nuc7cjyh:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_kit_nuc7i3dnhe:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_kit_nuc7i5dnke:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_kit_nuc7i7bnh:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_kit_nuc7i7dnke:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_kit_nuc8i7hnk:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:intel:compute_card_firmware:-:*:*:*:*:*:*:*
OR cpe:2.3:h:intel:compute_card_cd1iv128mk:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:compute_card_cd1m3128mk:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:compute_card_cd1p64gk:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:intel:compute_stick_firmware:-:*:*:*:*:*:*:*
OR cpe:2.3:h:intel:compute_stick_stck1a32wfc:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:compute_stick_stk1aw32sc:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:compute_stick_stk2m3w64cc:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:compute_stick_stk2mv64cc:-:*:*:*:*:*:*:*
History

21 Nov 2024, 03:26

Type Values Removed Values Added
References () https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00144.html - Patch, Vendor Advisory () https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00144.html - Patch, Vendor Advisory
Information

Published : 2019-01-10 20:29

Updated : 2024-11-21 03:26

NVD link : CVE-2017-3718

Mitre link : CVE-2017-3718

CVE.ORG link : CVE-2017-3718

JSON object : View

Products Affected

intel

CWE
NVD-CWE-noinfo