Description:

Intel has released security updates to address multiple vulnerabilities in the following products:

• Intel® SSD DCT
  • Versions before 3.0.23.
• Thunderbolt™ 1: Intel® DSL3310, Intel® DSL3510, Intel® DSL4510, Intel® DSL4410.
• Thunderbolt™ 2: Intel® DSL5520, Intel® DSL5320.
• Thunderbolt™ 3: Intel® DSL6540, Intel® DSL6340, Intel® JHL6540, Intel® JHL6340, Intel® JHL6240, Intel® JHL7540, Intel® JHL7340.
• Intel® Wi-Fi 6 AX201
• Intel® Wi-Fi 6 AX200
• Intel® Wireless-AC 9560
• Intel® Wireless-AC 9462
• Intel® Wireless-AC 9461
• Intel® Wireless-AC 9260
• Intel® Dual Band Wireless-AC 8265
• Intel® Dual Band Wireless-AC 8260
• Intel® Dual Band Wireless-AC 3168
• Intel® Wireless 7265 (Rev D) Family
• Intel® Dual Band Wireless-AC 3165
• Intel® Server Board S2600ST Family
• Intel® Server Board S2600BP Family
• Intel® Server Board S2600WF Family
• Intel® Server Board S2600CW Family
• Intel® Server Board S2600KP Family
• Intel® Server Board S2600TP Family
• Intel® Server Board S2600WT Family
• Intel® Server Board S2600ST Family
• Intel® Server Board S2600BP Family
• Intel® Server Board S2600WF Family
• Intel® Graphics Drivers for 3rd, 4th, 5th, 6th, 7th, 8th, 9th and 10th Generation Intel® Processors for Windows* 7, 8.1 and 10 before versions 15.33.50.5129, 15.40.45.5126, 15.45.31.5127, and 26.20.100.7755.
• Intel® PAC with Arria® 10 GX FPGA before Intel Acceleration Stack
  • 1.2.1.
• Intel® LED Manager for NUC
  • Versions before 1.2.3.
• Intel® RSTe Software RAID Driver for the Intel® Server Board M10JNP2SB
  • Versions before 4.7.0.1119.
• Intel® RAID Web Console 3 for Windows*
  • Versions before 7.012.016.000
• Intel® Wireless for Open Source daemon
  • Versions before 1.5.
• Intel® Server System R1000WT and R2000WT Families
• Intel® Server Boards S2600WT Family
• Intel® Server Board S2600CW Family
• Intel® Compute Module HNS2600KP Family
• Intel® Server Board S2600KP Family
• Intel® Compute Module HNS2600TP Family
• Intel® Server Board S2600TP Family
• Intel® Server System R1000SP, LSVRP and LR1304SP Families
• Intel® Server Board S1200SP Family
• Intel® Server System R1000WF and R2000WF Families
• Intel® Server Board S2600WF Family
• Intel® Server Board S2600ST Family
• Intel® Compute Module HNS2600BP Family
• Intel® Server Board S2600BP Family
• Intel® Wireless for Open Source daemon
  • 7.210
• Intel® Computing Improvement Program
  • Versions before 2.4.5718.
• Intel® NUC 8 Enthusiast, a Mini PC with Windows* 10 - NUC8i7BEHGA, NUC8i7BEKQA
• Intel® NUC 8 Home - a Mini PC with Windows 10 - NUC8i3BEHFA, NUC8i5BEHFA, NUC8i5BEKPA
• Intel® NUC Kit - NUC8i3BEH, NUC8i3BEHS, NUC8i3BEK, NUC8i5BEH, NUC8i5BEHS, NUC8i5BEK, NUC8i7BEH, NUC8i7BEK
• Intel® Compute Card - CD1C32GK, CD1C64GK, CD1P64GK
• Intel® NUC 8 Business, a Mini PC with Windows 10 - NUC8i7HNKQC
• Intel® NUC 8 Enthusiast, a Mini PC with Windows 10 - NUC8i7HVKVA, NUC8i7HVKVAW
• Intel® NUC Kit - NUC8i7HNK, NUC8i7HVK
• Intel® NUC Board - NUC7i7DNBE
• Intel® NUC Kit - NUC7i7DNHE, NUC7i7DNKE
• Intel® NUC 7 Business, a Mini PC with Windows® 10 Pro - NUC7i5DNKPC
• Intel® NUC Board - NUC7i5DNBE
• Intel® NUC Kit - NUC7i5DNHE, NUC7i5DNKE
• Intel® NUC 7 Business, a Mini PC with Windows® 10 Pro - NUC7i3DNHNC, NUC7i3DNKTC
• Intel® NUC Board - NUC7i3DNBE
• Intel® NUC Kit - NUC7i3DNHE, NUC7i3DNKE
• Intel® Compute Stick - STK2mv64CC
• Intel® NUC Kit - NUC6i7KYK
• Intel® NUC 7 Essential, a Mini PC with Windows® 10 - NUC7CJYSAL
• Intel® NUC Kit - NUC7CJYH, NUC7PJYH
• Intel® NUC 7 Enthusiast, a Mini PC with Windows® 10 - NUC7i7BNHXG, NUC7i7BNKQ
• Intel® NUC 7 Home, a Mini PC with Windows® 10 - NUC7i3BNHXF, NUC7i5BNHXF, NUC7i5BNKP
• Intel® NUC Board - NUC7i3BNB, NUC7i5BNB, NUC7i7BNB
• Intel® NUC Kit - NUC7i3BNH, NUC7i3BNHX1, NUC7i3BNK, NUC7i5BNH, NUC7i5BNHX1, NUC7i5BNK, NUC7i7BNH, NUC7i7BNHX1
• Intel® NUC Kit - NUC6CAYH, NUC6CAYS
• Intel® NUC Board - DE3815TYBE
• Intel® NUC Kit - DE3815TYKHE
• Intel® NUC Board - DE3815TYBE, labeled AA numbers: H26998-401, 402, 403, 404 or 405
• Intel® NUC Kit - DE3815TYKHE, labeled SA numbers: H27002-400, 401, 402, 403 or 404
• Intel® NUC Kit - NUC5CPYH, NUC5PGYH, NUC5PPYH
• Intel® NUC Kit - NUC5i3RYH, NUC5i3RYHS, NUC5i3RYHSN, NUC5i3RYK, NUC5i5RYH, NUC5i5RYHS, NUC5i5RYK, NUC5i7RYH
• Intel® NUC Board - NUC5i5MYBE
• Intel® NUC Kit - NUC5i5MYHE
• Intel® NUC Board - NUC5i3MYBE
• Intel® NUC Kit - NUC5i3MYHE
• Intel® Mailbox Interface driver
• Intel® Computing Improvement Program
  • Versions before 6.1.160.14.
• Intel® Distribution of OpenVINO™ Toolkit
  • Versions before 2020.2.

Threats:

Attacker could exploit these vulnerabilities by doing the following:

• Escalation of privilege.
• Denial of service attack (DoS).
• Information Disclosure.

Best practice and Recommendations:

The CERT team encourages users to review Intel security advisory and apply the necessary updates:

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00406.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00411.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00337.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00355.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00367.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00369.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00375.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00376.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00377.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00378.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00379.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00386.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00387.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00392.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00394.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00396.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00399.html