VulnerabilityModified

CVE-2017-5684

The BIOS in Intel Compute Stick systems based on 6th Gen Intel Core processors prior to version CC047 may allow an attacker with physical access to the system to gain access to personal information.

LOW 3.9EPSS 0.30%

Does this matter?

Lower severity and a low EPSS score (0.30%). Track it; it rarely justifies an emergency change on its own.

Description

The BIOS in Intel Compute Stick systems based on 6th Gen Intel Core processors prior to version CC047 may allow an attacker with physical access to the system to gain access to personal information.

CVSS 3.0: 3.9 LOWCVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.30% probability · 23th percentile
CISA KEV: Not listed
Weakness: CWE-276
Affected: intel/stk2mv64cc bios
Source: secure@intel.com

References

https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00073&languageid=en-frVendor Advisory
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00073&languageid=en-frVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.