Windows 10: Intel Driver & Support Assistant Advisory - May 14

Brink · May 14, 2019

Intel ID: INTEL-SA-00252 Advisory Category: Software Impact of vulnerability: Denial of Service, Information Disclosure Severity rating: MEDIUM Original release: 05/14/2019 Last revised: 05/14/2019
Summary:

A potential security vulnerability in Intel® Driver & Support Assistant may allow denial of service or information of disclosure. Intel is releasing software updates to mitigate this potential vulnerability.

Vulnerability Details:

CVEID: CVE-2019-11114
Description: Insufficient input validation in Intel(R) Driver & Support Assistant version 19.3.12.3 and before may allow a privileged user to potentially enable denial of service via local access.
CVSS Base Score: 4.4 Medium
CVSS Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

CVEID: CVE-2019-11095
Description: Insufficient access control in Intel(R) Driver & Support Assistant version 19.3.12.3 and before may allow a privileged user to potentially enable information disclosure via local access.
CVSS Base Score: 3.4 Low
CVSS Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

Affected Products:

Intel® Driver & Support Assistant Version 19.3.12.3 and before.

Recommendations:

Intel recommends that users of Intel® Driver & Support Assistant update to 19.4.18 or later.

Updates are available for download at these locations:

Intel(R) Driver & Support Assistant

Download Intel(R) Driver & Support Assistant

Acknowledgements:

Intel would like to thank Frank Carius from Net at Work GmbH (CVE-2019-11095), Richard Warren of NCC Group (CVE-2019-11114) for reporting these issues.

Intel, and nearly the entire technology industry, follows a disclosure practice called Coordinated Disclosure, under which a cybersecurity vulnerability is generally publicly disclosed only after mitigations are available.

Revision History

Revision Date Description 1.0 05/14/2019 Initial Release
Click to expand...

Source: INTEL-SA-00252

:)

Brink · May 14, 2019

Intel Driver & Support Assistant Advisory - Nov. 13

[table][tr]Intel ID: INTEL-SA-00187 [/tr] [tr][td]Advisory Category:[/td] [td]Software[/td] [/tr] [tr][td]Impact of vulnerability:[/td] [td]Information Disclosure[/td] [/tr] [tr][td]Severity rating:[/td] [td]MEDIUM[/td] [/tr] [tr][td]Original release:[/td] [td]11/13/2018[/td] [/tr] [tr][td]Last revised:[/td] [td]11/13/2018[/td] [/tr] [/table]

Summary:

A potential security vulnerability in the Intel® Driver & Support Assistant may allow information disclosure. Intel is releasing Driver & Support Assistant updates to mitigate this potential vulnerability.

Vulnerability Details:

CVEID: CVE-2018-3621

Description: Insufficient input validation in the Intel(R) Driver & Support Assistant before 3.6.0.4 may allow an unauthenticated user to potentially enable information disclosure via adjacent access.
CVSS Base Score: 4.6 Medium

CVSS Vector: CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected Products:

Intel® Driver & Support Assistant before 3.6.0.4

Recommendations:

Intel recommends that users of Intel® Driver & Support Assistant update to 3.6.0.4 or later.

Updates are available for download at this location: https://downloadcenter.intel.com/dow...port-Assistant

Acknowledgements:

Intel would like to thank Clément Notin for reporting this issue and working with us on coordinated disclosure.

Revision History

[table][tr]Revision Date Description [/tr] [tr][td]1.0[/td] [td]11/13/2018[/td] [td]Initial Release[/td] [/tr] [/table]
Click to expand...

Source: INTEL-SA-00187

Brink · May 14, 2019

Intel Driver & Support Assistant and Software Asset Manager Advisory

[table][tr]Intel ID: INTEL-SA-00165 [/tr] [tr][td]Advisory Category:[/td] [td]Software[/td] [/tr] [tr][td]Impact of vulnerability:[/td] [td]Escalation of Privilege[/td] [/tr] [tr][td]Severity rating:[/td] [td]HIGH[/td] [/tr] [tr][td]Original release:[/td] [td]09/11/2018[/td] [/tr] [tr][td]Last revised:[/td] [td]09/11/2018[/td] [/tr] [/table]

Summary:

Potential security vulnerabilities in Intel® Driver & Support Assistant, Intel® Software Asset Manager and Intel® Computing Improvement Program may allow escalation of privilege. Intel is releasing Intel® Driver & Support Assistant updates to mitigate these potential vulnerabilities.

Vulnerability Details

CVEID: CVE-2018-12148
Description: Privilege escalation in file permissions in Intel(R) Driver and Support Assistant before 3.5.0.1 may allow an authenticated user to potentially execute code as administrator via local access.
CVSS Base Score: 7.8 High
CVSS Vector: CVSS:3.0/ AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVEID: CVE- 2018-12168
Description: Privilege escalation in file permissions in Intel(R) Computing Improvement Program before version 2.2.0.03942 may allow an authenticated user to potentially execute code as administrator via local access.
CVSS Base Score: 7.8 High
CVSS Vector: CVSS:3.0/ AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products:

Intel® Driver & Support Assistant before 3.5.0.1

Intel® Computing Improvement Program before 2.2.0.03942

Recommendations:

Intel recommends that users of Intel® Driver & Support Assistant, and Intel® Computing Improvement Program update to Intel® Driver & Support Assistant 3.5.0.3 or later.

Intel® Software Asset Manager is part of the Intel® Driver & Support Assistant and will be updated as well.

Updates are available for download at this location: https://downloadcenter.intel.com/dow...port-Assistant

Acknowledgements:

Intel would like to thank Mark Barnes (MWR Labs) for reporting this issue and working with us on coordinated disclosure.

Revision History

[table][tr]Revision Date Description [/tr] [tr][td]1.0[/td] [td]09/11/2018[/td] [td]Initial Release[/td] [/tr] [/table]
Click to expand...

Source: INTEL-SA-00165

Neil Macready · May 14, 2019

Latest Intel Driver & Support Assistant v. 3.2.0.9

In September 2017, the Intel® Driver Update Utility (Intel® DUU) transitioned to the Intel® Driver & Support Assistant (Intel® DSA) to improve functionality and enhance support.

What is the Intel® Driver & Support Assistant?

It's a restructured version of the previous Intel® Driver Update Utility.

Improvements allow it to:

• Easily identify drivers installed by Intel and third-parties

• List available driver updates

• Scan for system and device information to assist with customer support troubleshooting

• Host the main interface on the Intel Support website

• Provide integrated support

• Combine several Intel support tools into one location

• Intel® Driver Update Utility, Intel® System Identification Utility, and Intel® System Support Utility

• Provide links to other support information

Intel® Driver & Support Assistant

Windows 10: Intel Driver & Support Assistant Advisory - May 14

Intel Driver & Support Assistant Advisory - May 14

Intel Driver & Support Assistant Advisory - May 14

Intel Driver & Support Assistant Advisory - May 14

Intel Driver & Support Assistant Advisory - May 14 - Similar Threads - Intel Driver Support

Intel Driver And Support Assistant

Intel Driver And Support Assistant

Intel Driver and Support Assistant

Intel Driver and Support Assistant Vulnerability Advisory

Intel NUC Advisory - May 14

Intel PROSet Wireless WiFi Software Advisory - May 14

intel driver and support assistant

Intel Driver & Support Assistant Advisory - Nov. 13

Intel Driver & Support Assistant and Software Asset Manager Advisory

Users found this page by searching for:

DSA version 19.4.18

intel-sa-00252

intel proset wireless configured to sync with amt