What is CVE-2017-5686?

CVE-2017-5686 is a low-severity vulnerability in Intel Nuc Nuc6i5sysh/k, Nuc6i3sysh/k, classified under Incorrect Default Permissions. CVSS score: 3.9/10. Published 2017-04-03.

How severe is CVE-2017-5686?

Low severity. CVSS v3 base score is 3.9 out of 10.

Vulnerability in Intel Nuc Nuc6i5sysh/k, Nuc6i3sysh/k

CVE-2017-5686

The BIOS in Intel NUC systems based on 6th Gen Intel Core processors prior to version SY0059 may allow may allow an attacker with physical access to the system to gain access to personal information.

EPSS: 0.003 (22.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.9 (Low). Vector: CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N.

Affected products

Intel Nuc Nuc6i5sysh/k, Nuc6i3sysh/k — versions Before SY0059
Intel Nuc6i3syh_bios
Intel Nuc6i3syk
Intel Nuc6i3syk_bios
Intel Nuc6i5syh

Weakness classification (CWE)

CWE-276 — Incorrect Default Permissions

References

secure@intel.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-5686?: CVE-2017-5686 is a low-severity vulnerability in Intel Nuc Nuc6i5sysh/k, Nuc6i3sysh/k, classified under Incorrect Default Permissions. CVSS score: 3.9/10. Published 2017-04-03.
How severe is CVE-2017-5686?: Low severity. CVSS v3 base score is 3.9 out of 10.