CVE Feed

    Dashboard / CVE / CVE-2017-5684

    CVE-2017-5684

    The BIOS in Intel Compute Stick systems based on 6th Gen Intel Core processors prior to version CC047 may allow an attacker with physical access to the system to gain access to personal information.

    Published:Apr 3, 2017
    Last Modified:Apr 20, 2025
    EPS:Apr 3, 2017
    EPSS Score:0.00049
    CVSS Score:3.9

    Affected Products

    Vendor
    Intel
    Product
    Stk2mv64cc
    Vendor
    Intel
    Product
    Stk2mv64cc Bios

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-276 Incorrect Default Permissions

    Related CVEs

    CVE-2022-28699 (CVSS 7.5) — Improper input validation for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enabl…
    CVE-2020-8742 (CVSS 6.7) — Improper input validation in the firmware for Intel(R) NUCs may allow a privileged user to potentially enable …
    CVE-2019-14612 (CVSS 6.7) — Out of bounds write in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalati…
    CVE-2019-14611 (CVSS 6.7) — Integer overflow in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation …
    CVE-2019-14609 (CVSS 6.7) — Improper input validation in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable es…
    CVE-2019-14610 (CVSS 7.8) — Improper access control in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable …
    CVE-2019-14608 (CVSS 7.8) — Improper buffer restrictions in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially en…
    CVE-2017-5691 (CVSS 9) — Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1…
    CVE-2016-8103 (CVSS 6.7) — SMM call out in all Intel Branded NUC Kits allows a local privileged user to access the System Management Mode…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High