Description:

Intel has released security updates to address vulnerabilities in the following products:

• Intel® Smart Sound Technology before versions shown below:
  • 10th Generation Intel® Core™ i7 Processors, version 3431
  • 8th Generation Intel® Core™ Processors, version 3349
• BlueZ
  • before version 5.53.
• MAX® 10 FPGA
  • all versions.
• Intel® NUC Firmware:
  • Intel® NUC Kit NUC8i7BEK
  • Intel® NUC 8 Enthusiast PC NUC8i7BEKQA
  • Intel® NUC Kit NUC8i7HNK
  • Intel® NUC 8 Business PC NUC8i7HNKQC
  • Intel® NUC 8 Mainstream-G kit NUC8i7INH
  • Intel® NUC 8 Mainstream-G kit NUC8i5INH
  • Intel® NUC 8 Mainstream-G mini PC NUC8i7INH
  • Intel® NUC 8 Rugged Kit NUC8CCHKR
  • Intel® NUC Board NUC8CCHB
  • Intel® NUC 8 Home PC NUC8i3CYSM
  • Intel® NUC Kit NUC7i7DNKE
  • Intel® NUC Kit NUC7i7DNHE
  • Intel® NUC Kit NUC7i5DNKE
  • Intel® NUC Kit NUC7i5DNHE
  • Intel® NUC Kit NUC7i3DNKE
  • Intel® NUC Kit NUC7i3DNHE
  • Intel® NUC Board NUC7i7DNBE
  • Intel® NUC Board NUC7i5DNBE
  • Intel® NUC Board NUC7i3DNBE
  • Intel® Compute Stick STK2m3W64CC
  • Intel® Compute Stick STK2m364CC
  • Intel® Compute Stick STK1A32SC
  • Intel® Compute Stick STK1AW32SC
  • Intel® NUC Kit NUC6i7KYK
  • Intel® NUC 7 Essential PC NUC7CJYSAL
  • Intel® NUC Kit NUC7CJYH
  • Intel® NUC Kit NUC7PJYH
  • Intel® NUC Kit NUC7i7BNH
  • Intel® NUC Kit NUC7i5BNK
  • Intel® NUC Kit NUC7i3BNH
  • Intel® NUC Kit NUC7i5BNH
  • Intel® NUC Kit NUC7i3BNK
  • Intel® NUC Kit NUC7i7BNHX1
  • Intel® NUC Kit NUC7i5BNHX1
  • Intel® NUC Kit NUC7i3BNHX1
  • Intel® NUC 7 Enthusiast PC NUC7i7BNHXG
  • Intel® NUC 7 Home a Mini PC NUC7i5BNHXF
  • Intel® NUC 7 Home a Mini PC NUC7i3BNHXF
  • Intel® NUC 7 Home a Mini PC NUC7i5BNKP
  • Intel® NUC Kit NUC6CAYS
  • Intel® NUC Kit NUC6CAYH
  • Intel® NUC Kit DE3815TYKHE
  • Intel® NUC Board DE3815TYBE
  • Intel® NUC Kit NUC6i3SYH
  • Intel® NUC Kit NUC6i5SYH
  • Intel® NUC Kit NUC6i3SYK
  • Intel® NUC Kit NUC6i5SYK
  • Intel® NUC Kit NUC5PGYH
  • Intel® NUC Kit NUC5PPYH
  • Intel® NUC Kit NUC5CPYH
  • Intel® NUC Kit NUC5i5RYK
  • Intel® NUC Kit NUC5i3RYH
  • Intel® NUC Kit NUC5i3RYHS
  • Intel® NUC Kit NUC5i3RYHSN
  • Intel® NUC Kit NUC5i3RYK
  • Intel® NUC Kit NUC5i5RYH
  • Intel® NUC Kit NUC5i5RYHS
  • Intel® NUC Kit NUC5i7RYH
  • Intel® NUC Kit NUC5i3MYHE
  • Intel® NUC Kit NUC5i5MYHE
  • Intel® NUC Board NUC5i5MYBE
  • Intel® NUC Board NUC5i3MYBE
  • Intel® NUC Kit D54250WYK
  • Intel® NUC Board D34010WYB
  • Intel® NUC Board D54250WYB
  • Intel® NUC Kit D34010WYK
  • Intel® NUC Kit D34010WYKH
  • Intel® NUC Kit D54250WYKH
  • Intel® Compute Stick STCK1A32WFC
  • Intel® Compute Stick STCK1A8LFC

• Intel Processors:
  • 8th Generation Intel® Core™ Processor Family
  • 06_8EH
  • 06_5CH
  • 06_4DH
  • 06_56H
  • 06_4FH
  • 06_47H
  • 06_3DH
  • 06_4CH
  • 06_55H
  • 06_9EH
  • 06_A6H
  • 06_6EH
  • 06_5FH
  • 06_7AH
  • 06_3AH
  • 06_3CH
  • 06_3FH
  • 06_46H
  • 06_45H
  • 06_7EH
  • 06_3EH
  • 06_2AH
  • 06_2DH
  • 06_5EH
  • 06_4EH
  • 06_37H
  • 06_4AH
  • 06_5AH
  • 06_5DH
  • 06_65H
  • 06_75H
  • 06_1CH
  • 06_26H
  • 06_27H
  • 06_35H
  • 06_36H
  • 06_86H
  • 06_96H
  • 06_9CH
• Intel® Optane™ DC Persistent Memory Module Management Software
  • before version 1.0.0.3461.
• The Intel® FPGA Programmable Acceleration Card N3000
  • all versions.

Threats:

Attacker could exploit these vulnerabilities by doing the following:

• Elevation of privileges.
• Denial-of-service (DoS).
• Information Disclosure.

Best practice and Recommendations:

The CERT team encourages users to review Intel security advisory and apply the necessary updates:

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00354.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00352.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00349.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00334.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00330.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00326.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00319.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html