CVE Feed

    Dashboard / CVE / CVE-2017-5685

    CVE-2017-5685

    The BIOS in Intel NUC systems based on 6th Gen Intel Core processors prior to version KY0045 may allow may allow an attacker with physical access to the system to gain access to personal information.

    Published:Apr 3, 2017
    Last Modified:Apr 20, 2025
    EPS:Apr 3, 2017
    EPSS Score:0.00064
    CVSS Score:3.9

    Affected Products

    Vendor
    Intel
    Product
    Nuc6i7kyk
    Vendor
    Intel
    Product
    Nuc6i7kyk Bios

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-276 Incorrect Default Permissions

    Related CVEs

    CVE-2020-8742 (CVSS 6.7) — Improper input validation in the firmware for Intel(R) NUCs may allow a privileged user to potentially enable …
    CVE-2019-14612 (CVSS 6.7) — Out of bounds write in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalati…
    CVE-2019-14611 (CVSS 6.7) — Integer overflow in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation …
    CVE-2019-14609 (CVSS 6.7) — Improper input validation in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable es…
    CVE-2019-14610 (CVSS 7.8) — Improper access control in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable …
    CVE-2019-14608 (CVSS 7.8) — Improper buffer restrictions in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially en…
    CVE-2017-5691 (CVSS 9) — Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High