Windows 10: Intel NUC Firmware Security Advisory

Brink · Sep 12, 2018

Intel ID: INTEL-SA-00176 Advisory Category: Firmware Impact of vulnerability: Escalation of Privilege, Denial of Service, Information Disclosure Severity rating: HIGH Original release: 09/11/2018 Last revised: 09/11/2018
Summary:

A potential security vulnerability in firmware for Intel® NUC may allow information disclosure, escalation of privilege and/or denial of service. Intel® is releasing firmware security updates for Intel® NUC Firmware to mitigate this potential vulnerability.

Vulnerability Details

CVEID: CVE-2018-12176

Description: Improper input validation in firmware for Intel® NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial of service via local access.

CVSS Base Score: 8.2 High

CVSS Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Affected Products:

· Intel® NUC Kit NUC7CJYH
· Intel® NUC Kit NUC8i7HNK
· Intel® Compute Card CD1M3128MK
· Intel® Compute Card CD1IV128MK
· Intel® Compute Card CD1P64GK
· Intel® NUC Kit NUC7i7DNKE
· Intel® NUC Kit NUC7i5DNKE
· Intel® NUC Kit NUC7i3DNHE
· Intel® NUC Kit NUC7i7BNH
· Intel® NUC Kit NUC6CAYS
· Intel® NUC Kit DE3815TYBE
· Intel® NUC Kit NUC6i5SYH
· Intel® NUC Kit NUC6i7KYK
· Intel® NUC Kit NUC5PGYH
· Intel® NUC Kit NUC5CPYH
· Intel® NUC Kit NUC5i7RYH
· Intel® NUC Kit NUC5i5MYHE
· Intel® NUC Kit NUC5i3MYHE
· Intel® NUC Kit DE3815TYBE
· Intel® NUC Kit DN2820FYKH
· Intel® NUC Kit D54250WYB
· Intel® NUC Kit D53427RKE
· Intel® NUC Kit D33217GKE
· Intel® Compute Stick STK2mv64CC
· Intel® Compute Stick STK2m3W64CC
· Intel® Compute Stick STK1AW32SC
· Intel® Compute Stick STCK1A32WFC

Recommendations:

Intel recommends that users update to the latest version (see provided table).

Product Download link
(BIOS dl link) Intel® NUC Kit NUC7CJYH NUC7CJYH Intel® NUC Kit NUC8i7HNK NUC8i7HNK Intel® Compute Card CD1M3128MK CD1M3128MK Intel® Compute Card CD1IV128MK CD1IV128MK Intel® Compute Card CD1P64GK CD1P64GK Intel® NUC Kit NUC7i7DNKE NUC7i7DNKE Intel® NUC Kit NUC7i5DNKE NUC7i5DNKE Intel® NUC Kit NUC7i3DNHE NUC7i3DNHE Intel® NUC Kit NUC7i7BNH NUC7i7BNH Intel® NUC Kit NUC6CAYS NUC6CAYS Intel® NUC Kit DE3815TYBE DE3815TYBE Intel® NUC Kit NUC6i5SYH NUC6i5SYH Intel® NUC Kit NUC6i7KYK NUC6i7KYK Intel® NUC Kit NUC5PGYH NUC5PGYH Intel® NUC Kit NUC5CPYH NUC5CPYH Intel® NUC Kit NUC5i7RYH NUC5i7RYH Intel® NUC Kit NUC5i5MYHE NUC5i5MYHE Intel® NUC Kit NUC5i3MYHE NUC5i3MYHE Intel® NUC Kit DE3815TYBE DE3815TYBE Intel® NUC Kit DN2820FYKH DN2820FYKH Intel® NUC Kit D54250WYB D54250WYB Intel® NUC Kit D53427RKE D53427RKE Intel® NUC Kit D33217GKE D33217GKE Intel® Compute Stick STK2mv64CC STK2mv64CC Intel® Compute Stick STK2m3W64CC STK2m3W64CC Intel® Compute Stick STK1AW32SC STK1AW32SC Intel® Compute Stick STCK1A32WFC STCK1A32WFC
Acknowledgements:

Intel would like to thank Ruslan Zakirov and Alexander Ermolov for reporting this issue and working with us on coordinated disclosure.

Revision History

Revision Date Description 1.0 09/11/2018 Initial Release
Click to expand...

Source: INTEL-SA-00176

:)

Melchizedek Qui · Sep 12, 2018

intel security assist

Hello lindamWZ,

You can check the links below to help you reinstall Intel Security Assist:

Intel Management Engine Driver for Windows 7*, 8.1*, and Windows 10.

Intel Management Engine Consumer Driver for Windows 10
for Intel NUC Kit NUC6i3sy NUC6i5SY NUC6i7KYK

Intel Management Engine Consumer Driver for Windows 10 for Intel NUC
Kit NUC7i3BN NUC7i5BN NUC7i7BN

Intel Management Engine Consumer Driver for Windows 10 for Intel
NUC Kit NUC5i5RY NUC5i7RY NUC5i3MY

For more information, you can also go to your device manufacturer's website check for the installer of the said software.

Let me know if you have other concerns.

Regards.

Jism · Sep 12, 2018

Major Intel NUC Security Vulnerability Uncovered

Both Intel and AMD cpu's are basicly not recommended for fully secured systems. Even that flaw in Intel's NUC is nothing compared to the microcode intel and amd puts into their cpu's: https://libreboot.org/faq/#intel

Brink · Sep 12, 2018

Intel Introduces New NUC Kits and NUC Mini PCs to the Intel NUC Family

The new Intel NUC kits (NUC8i7BEH, NUC8i5BEH, NUC8i5BEK, NUC8i3BEH, NUC8i3BEK, formerly code-named Bean Canyon) allow integrators and DIYers to customize with their choice of storage, memory and operating system. With this flexibility, the Intel NUC kits offer a range of price/performance options to meet most mainstream users' needs in an ultra-small form factor. (Credit: Intel Corporation)

The new Intel NUC mini PCs (NUC8i3CYSM, NUC8i3CYSN, formerly code-named Crimson Canyon) are an affordable mainstream gaming option for playing some of today's most popular games at 1080p, including League of Legends, TF2 and CS:GO. (Credit: Intel Corporation)

What’s New: Today, Intel introduces new NUC kits and NUC mini PCs to the Intel NUC family featuring 8th Gen Intel® Core™ processors, providing greater choice for a wide range of mainstream computing needs.
“Intel NUCs are mini PCs that offer high-performance capabilities in a space-saving design and are perfectly suited for home theater, home office, entry-level gaming or as a replacement for desktops when space is a concern. These new NUCs offer a number of new options that will fit a wide range of computing needs.”
–John Deatherage, marketing director for Intel NUCs
What It Is: The new Intel NUCs bring desktop performance in a compact form factor for enthusiasts of all levels to use anywhere.

The new Intel NUC kits (NUC8i7BEH, NUC8i5BEH, NUC8i5BEK, NUC8i3BEH, NUC8i3BEK, formerly code-named Bean Canyon) are based on the 8th Gen Intel Core i7, i5 and i3 processors (formerly code-named Coffee Lake-U) featuring Intel Iris® graphics with eDRAM that can power home theater systems, drive content creator boxes and serve as a personal voice assistant. The new Intel NUC kits allow integrators and DIYers to customize with their choice of storage, memory and operating system. With this flexibility, the Intel NUC kits offer a range of price/performance options to meet most mainstream users’ needs in an ultra-small form factor.

Designed with the right balance of performance and affordability, the new Intel NUC mini PCs (NUC8i3CYSM, NUC8i3CYSN, formerly code-named Crimson Canyon) are an affordable mainstream gaming option for playing some of today’s most popular games at 1080p, including “League of Legends*”, “TF2″* and “CS:GO”*. These NUCs are powered by the 8th Gen Intel Core i3-8121U processors (formerly code-named Cannon Lake) and are the first mainstream NUCs to feature discrete graphics. These NUCs come fully configured with 1TB of storage, either 8GB or 4GB of memory, and Windows® 10 Home and include Intel’s Wireless-AC 9560 CNVi 802.11ac WiFi + Bluetooth 5 solution, two HDMI 2.0a outputs, and four USB 3.0 ports – all in a form factor that fits in the palm of your hand and can easily be hidden behind a monitor or mounted under a desk to save space.

Why It’s Important: Intel NUCs are mini PCs that offer high-performance capabilities in a space-saving design and are perfectly suited for home theater, home office, entry-level gaming or as a replacement for desktops when space is a concern. These new NUCs offer a number of new options that will fit a wide range of computing needs.

How You Get It: The new Intel NUC kits and Intel NUC mini PCs will be available worldwide through Intel distributors and through online retailers beginning in September.

More Context: For information on all Intel NUC kits, visit the NUC Kits page on Intel.com. For information on all fully configured Intel NUC mini PCs, visit the NUC Mini PCs page on Intel.com.
Click to expand...

Source: Intel Introduces New NUC Kits and NUC Mini PCs to the Intel NUC Family | Intel Newsroom

Windows 10: Intel NUC Firmware Security Advisory

Intel NUC Firmware Security Advisory

Intel NUC Firmware Security Advisory

Intel NUC Firmware Security Advisory

Intel NUC Firmware Security Advisory - Similar Threads - Intel NUC Firmware

Intel NUC Firmware update

Intel NUC Firmware update

Intel NUC Firmware Vulnerability Advisory - Oct. 8

Intel NUC Firmware Vulnerability Advisory

Intel NUC Vulnerability Advisory

Intel NUC Firmware Advisory

Intel NUC Advisory - May 14

Intel NUC Firmware Security Advisory - Jan. 8

Intel NUC Bios Updater Advisory for potential security vulnerability