3.9
CVE-2017-5684
- EPSS 0.05%
- Published 03.04.2017 21:59:00
- Last modified 20.04.2025 01:37:25
- Source secure@intel.com
- Teams watchlist Login
- Open Login
The BIOS in Intel Compute Stick systems based on 6th Gen Intel Core processors prior to version CC047 may allow an attacker with physical access to the system to gain access to personal information.
Data is provided by the National Vulnerability Database (NVD)
Intel ≫ Stk2mv64cc Bios Version <= ccsklm5v.86a.0046.2017.0105.1608
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.05% | 0.12 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 3.9 | 0.3 | 3.6 |
CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 2.1 | 3.9 | 2.9 |
AV:L/AC:L/Au:N/C:P/I:N/A:N
|
CWE-276 Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.