CVE-2017-3718

Published: Jan 10, 2019Modified: Nov 21, 2024

6.2

Vector

CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.3 / Impact: 5.9

Source: NVD

Description

Improper setting of device configuration in system firmware for Intel(R) NUC kits may allow a privileged user to potentially enable escalation of privilege via physical access.

Affected (3)

Products: Intel: Nuc Kit Firmware, Compute Card Firmware, Compute Stick Firmware

Intel

3 products

Nuc Kit Firmware

Compute Card Firmware

Compute Stick Firmware

Configuration A

1 vulnerable · 19 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Firmware	All versions

Running on/with	Platform Versions
Intel Nuc Kit D33217gke	All versions
Intel Nuc Kit D53427rke	All versions
Intel Nuc Kit D54250wyb	All versions
Intel Nuc Kit De3815tybe	All versions
Intel Nuc Kit Dn2820fykh	All versions
Intel Nuc Kit Nuc5cpyh	All versions
Intel Nuc Kit Nuc5i3myhe	All versions
Intel Nuc Kit Nuc5i5myhe	All versions
Intel Nuc Kit Nuc5i7ryh	All versions
Intel Nuc Kit Nuc5pgyh	All versions
Intel Nuc Kit Nuc6cays	All versions
Intel Nuc Kit Nuc6i5syh	All versions
Intel Nuc Kit Nuc6i7kyk	All versions
Intel Nuc Kit Nuc7cjyh	All versions
Intel Nuc Kit Nuc7i3dnhe	All versions
Intel Nuc Kit Nuc7i5dnke	All versions
Intel Nuc Kit Nuc7i7bnh	All versions
Intel Nuc Kit Nuc7i7dnke	All versions
Intel Nuc Kit Nuc8i7hnk	All versions

Configuration B

1 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Intel Compute Card Firmware	All versions

Running on/with	Platform Versions
Intel Compute Card Cd1iv128mk	All versions
Intel Compute Card Cd1m3128mk	All versions
Intel Compute Card Cd1p64gk	All versions

Configuration C

1 vulnerable · 4 platform

Vulnerable Software	Affected Versions
Intel Compute Stick Firmware	All versions

Running on/with	Platform Versions
Intel Compute Stick Stck1a32wfc	All versions
Intel Compute Stick Stk1aw32sc	All versions
Intel Compute Stick Stk2m3w64cc	All versions
Intel Compute Stick Stk2mv64cc	All versions

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00144.html

Source: secalert_us@oracle.com

PatchVendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00144.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.