Intel Updates
3030Warning Date
Severity Level
Warning Number
Target Sector
15 April, 2020
● High
2020-1137
All
Description:
Intel has released security updates to address multiple vulnerabilities in the following products:
- Intel® Data Migration Software
- versions 3.3 and earlier
- Intel® Wi-Fi 6 AX201
- Intel® Wi-Fi 6 AX200
- Intel® Wireless-AC 9560
- Intel® Wireless-AC 9462
- Intel® Wireless-AC 9461
- Intel® Wireless-AC 9260
- Intel® Dual Band Wireless-AC 8265
- Intel® Dual Band Wireless-AC 8260
- Intel® Dual Band Wireless-AC 3168
- Intel® Wireless 7265 (Rev D) Family
- Intel® Dual Band Wireless-AC 3165
- Intel® Modular Server MFS2600KISPP Compute Module
- Intel® Driver and Support Assistant
- Intel® Binary Configuration Tool
- Intel® NUC 8 Rugged Kit NUC8CCHKR
- Intel® NUC Board NUC8CCHB
- Intel® NUC 7 Essential PC NUC7CJYSAL
- Intel® NUC Kit NUC7CJYH
- Intel® NUC Kit NUC7PJYH
- Intel® NUC Kit NUC6CAYS
- Intel® NUC Kit NUC6CAYH
- Intel® NUC Kit DE3815TYKHE
- Intel® NUC Board DE3815TYBE
- Intel® Compute Stick STCK1A32WFC
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Escalation of privilege.
- Denial of service attack (DoS).
Best practice and Recommendations:
The CERT team encourages users to review Intel security advisory and apply the necessary updates:
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00338.html
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00344.html
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00351.html
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00359.html
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00363.html
There isn't update for Intel® Data Migration Software, it recommended to uninstall it or discontinue use at their earliest convenience:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00327.html