Windows 10: Intel NUC Firmware update

aliskander · Aug 20, 2021

I would like to upgrade my firmware on my Intel NUC computer. can I do that without losing my OS (Windows 10) and data? thanks, gabril

:)

Brink · Aug 20, 2021

Intel NUC Firmware Advisory

[table][tr]Intel ID: INTEL-SA-00264 [/tr] [tr][td]Advisory Category:[/td] [td]Firmware[/td] [/tr] [tr][td]Impact of vulnerability:[/td] [td]Escalation of Privilege, Denial of Service, Information Disclosure[/td] [/tr] [tr][td]Severity rating:[/td] [td]HIGH[/td] [/tr] [tr][td]Original release:[/td] [td]06/11/2019[/td] [/tr] [tr][td]Last revised:[/td] [td]06/11/2019[/td] [/tr] [/table]

Summary:

Potential security vulnerabilities in system firmware for Intel® NUC may allow escalation of privilege, denial of service and/or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities.

Vulnerability Details:

CVEID: CVE-2019-11123
Description: Insufficient session validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
CVSS Base Score: 7.5 High
CVSS Vector: CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

CVEID: CVE-2019-11124
Description: Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
CVSS Base Score: 7.5 High
CVSS Vector: CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

CVEID: CVE-2019-11125
Description: Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
CVSS Base Score: 7.5 High
CVSS Vector: CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

CVEID: CVE-2019-11126
Description: Pointer corruption in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
CVSS Base Score: 7.5 High
CVSS Vector: CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

CVEID: CVE-2019-11127
Description: Buffer overflow in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
CVSS Base Score: 8.2 High
CVSS Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CVEID: CVE-2019-11128
Description: Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
CVSS Base Score: 8.2 High
CVSS Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CVEID: CVE-2019-11129
Description: Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
CVSS Base Score: 7.5 High
CVSS Vector: CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Affected Products:

[table][tr][td]Affected Product[/td] [td]Updated Firmware[/td] [/tr] [tr][td]Intel® NUC Kit NUC8i3BEx Intel® NUC Kit NUC8i5BEx Intel® NUC Kit NUC8i7BEx[/td] [td]BIOS version 0071 or later[/td] [/tr] [tr][td]Intel® Compute Card CD1P64GK Intel® Compute Card CD1C64GK[/td] [td]BIOS version 0050 or later[/td] [/tr] [tr][td]Intel® NUC Kit NUC8i3CYx[/td] [td]BIOS version 0040 or later[/td] [/tr] [tr][td]Intel® NUC Kit NUC8i7HNK Intel® NUC Kit NUC8i7HVK[/td] [td]BIOS version 0054 or later[/td] [/tr] [tr][td]Intel® NUC Kit NUC7i7DNx[/td] [td]BIOS version 0063 or later[/td] [/tr] [tr][td]Intel® NUC Kit NUC7i5DNx[/td] [td]BIOS version 0063 or later[/td] [/tr] [tr][td]Intel® NUC Kit NUC7i3DNx[/td] [td]BIOS version 0063 or later[/td] [/tr] [tr][td]Intel® Compute Stick STK2MV64CC[/td] [td]BIOS version 0060 or later[/td] [/tr] [tr][td]Intel® Compute Stick STK2M3W64CC Intel® Compute Stick STK2M364CC[/td] [td]BIOS version 0060 or later[/td] [/tr] [tr][td]Intel® NUC Kit NUC6i7KYk[/td] [td]BIOS version 0062 or later[/td] [/tr] [tr][td]Intel® NUC Kit NUC7PJY Intel® NUC Kit NUC7CJY[/td] [td]BIOS version 0049 or later[/td] [/tr] [tr][td]Intel® NUC KitNUC6CAYx[/td] [td]BIOS version 0060 or later[/td] [/tr] [tr][td]Intel® NUC Kit DE3815TYB (BIOS ID CODE TYBYT20H.86A BIOS ID code)[/td] [td]BIOS version 0020 or later[/td] [/tr] [tr][td]Intel® NUC Kit DE3815TYB (BIOS ID CODE TYBYT10H.86A BIOS ID code)[/td] [td]BIOS version 0065 or later[/td] [/tr] [tr][td]Intel® NUC Kit NUC5CPYH Intel® NUC Kit NUC5PPYH Intel® NUC Kit NUC5PGYH[/td] [td]BIOS version 0076 or later[/td] [/tr] [tr][td]Intel® NUC Kit NUC5i7RYx Intel® NUC Kit NUC5i3RYx Intel® NUC Kit NUC5i5RYx[/td] [td]BIOS version 0379 or later[/td] [/tr] [tr][td]Intel® NUC Kit NUC5i5MYx[/td] [td]BIOS version 0051 or later[/td] [/tr] [tr][td]Intel® NUC Kit NUC5i3MYx[/td] [td]BIOS version 0054 or later[/td] [/tr] [tr][td]Intel® NUC Kit DN2820FYKH[/td] [td]BIOS version 0067 or later[/td] [/tr] [tr][td]Intel® Compute Stick STCK1A32WFC Intel® Compute Stick STCK1A8LFC[/td] [td]BIOS version 0039 or later[/td] [/tr] [tr][td]Intel® Compute Card CD1M3128MK[/td] [td]BIOS version 0056 or later[/td] [/tr] [tr][td]Intel® Compute Card CD1IV128MK[/td] [td]BIOS version 0036 or later[/td] [/tr] [tr][td]Intel® NUC Kit NUC7i3BNx Intel® NUC Kit NUC7i5BNx Intel® NUC Kit NUC7i7BNx[/td] [td]BIOS version 0079 or later[/td] [/tr] [tr][td]Intel® NUC Kit NUC6i3SYx Intel® NUC Kit NUC6i5SYx[/td] [td]BIOS version 0070 or later[/td] [/tr] [tr][td]Intel® NUC Kit D54250WYx Intel® NUC Kit D34010WYx[/td] [td]BIOS version 0051 or later[/td] [/tr] [/table]

Recommendations:

Intel recommends that users update to the latest firmware version (see provided table).

Acknowledgements:

Intel would like to thank Alexander Ermolov (CVE-2019-11123, CVE-2019-11124, CVE-2019-11125, CVE-2019-11129), Ruslan Zakirov (CVE-2019-11126, CVE-2019-11127), Malyutin Maksim (CVE-2019-11128) for reporting these issues.

Intel, and nearly the entire technology industry, follows a disclosure practice called Coordinated Disclosure, under which a cybersecurity vulnerability is generally publicly disclosed only after mitigations are available.

Revision History

[table][tr]Revision Date Description [/tr] [tr][td]1.0[/td] [td]06/11/2019[/td] [td]Initial Release[/td] [/tr] [/table]
Click to expand...

Source: https://www.intel.com/content/www/us...-sa-00264.html

Brink · Aug 20, 2021

Intel NUC Firmware Advisory

[table][tr]Intel ID: INTEL-SA-00264 [/tr] [tr][td]Advisory Category:[/td] [td]Firmware[/td] [/tr] [tr][td]Impact of vulnerability:[/td] [td]Escalation of Privilege, Denial of Service, Information Disclosure[/td] [/tr] [tr][td]Severity rating:[/td] [td]HIGH[/td] [/tr] [tr][td]Original release:[/td] [td]06/11/2019[/td] [/tr] [tr][td]Last revised:[/td] [td]06/11/2019[/td] [/tr] [/table]

Summary:

Potential security vulnerabilities in system firmware for Intel® NUC may allow escalation of privilege, denial of service and/or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities.

Vulnerability Details:

CVEID: CVE-2019-11123
Description: Insufficient session validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
CVSS Base Score: 7.5 High
CVSS Vector: CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

CVEID: CVE-2019-11124
Description: Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
CVSS Base Score: 7.5 High
CVSS Vector: CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

CVEID: CVE-2019-11125
Description: Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
CVSS Base Score: 7.5 High
CVSS Vector: CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

CVEID: CVE-2019-11126
Description: Pointer corruption in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
CVSS Base Score: 7.5 High
CVSS Vector: CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

CVEID: CVE-2019-11127
Description: Buffer overflow in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
CVSS Base Score: 8.2 High
CVSS Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CVEID: CVE-2019-11128
Description: Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
CVSS Base Score: 8.2 High
CVSS Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CVEID: CVE-2019-11129
Description: Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
CVSS Base Score: 7.5 High
CVSS Vector: CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Affected Products:

[table][tr][td]Affected Product[/td] [td]Updated Firmware[/td] [/tr] [tr][td]Intel® NUC Kit NUC8i3BEx Intel® NUC Kit NUC8i5BEx Intel® NUC Kit NUC8i7BEx[/td] [td]BIOS version 0071 or later[/td] [/tr] [tr][td]Intel® Compute Card CD1P64GK Intel® Compute Card CD1C64GK[/td] [td]BIOS version 0050 or later[/td] [/tr] [tr][td]Intel® NUC Kit NUC8i3CYx[/td] [td]BIOS version 0040 or later[/td] [/tr] [tr][td]Intel® NUC Kit NUC8i7HNK Intel® NUC Kit NUC8i7HVK[/td] [td]BIOS version 0054 or later[/td] [/tr] [tr][td]Intel® NUC Kit NUC7i7DNx[/td] [td]BIOS version 0063 or later[/td] [/tr] [tr][td]Intel® NUC Kit NUC7i5DNx[/td] [td]BIOS version 0063 or later[/td] [/tr] [tr][td]Intel® NUC Kit NUC7i3DNx[/td] [td]BIOS version 0063 or later[/td] [/tr] [tr][td]Intel® Compute Stick STK2MV64CC[/td] [td]BIOS version 0060 or later[/td] [/tr] [tr][td]Intel® Compute Stick STK2M3W64CC Intel® Compute Stick STK2M364CC[/td] [td]BIOS version 0060 or later[/td] [/tr] [tr][td]Intel® NUC Kit NUC6i7KYk[/td] [td]BIOS version 0062 or later[/td] [/tr] [tr][td]Intel® NUC Kit NUC7PJY Intel® NUC Kit NUC7CJY[/td] [td]BIOS version 0049 or later[/td] [/tr] [tr][td]Intel® NUC KitNUC6CAYx[/td] [td]BIOS version 0060 or later[/td] [/tr] [tr][td]Intel® NUC Kit DE3815TYB (BIOS ID CODE TYBYT20H.86A BIOS ID code)[/td] [td]BIOS version 0020 or later[/td] [/tr] [tr][td]Intel® NUC Kit DE3815TYB (BIOS ID CODE TYBYT10H.86A BIOS ID code)[/td] [td]BIOS version 0065 or later[/td] [/tr] [tr][td]Intel® NUC Kit NUC5CPYH Intel® NUC Kit NUC5PPYH Intel® NUC Kit NUC5PGYH[/td] [td]BIOS version 0076 or later[/td] [/tr] [tr][td]Intel® NUC Kit NUC5i7RYx Intel® NUC Kit NUC5i3RYx Intel® NUC Kit NUC5i5RYx[/td] [td]BIOS version 0379 or later[/td] [/tr] [tr][td]Intel® NUC Kit NUC5i5MYx[/td] [td]BIOS version 0051 or later[/td] [/tr] [tr][td]Intel® NUC Kit NUC5i3MYx[/td] [td]BIOS version 0054 or later[/td] [/tr] [tr][td]Intel® NUC Kit DN2820FYKH[/td] [td]BIOS version 0067 or later[/td] [/tr] [tr][td]Intel® Compute Stick STCK1A32WFC Intel® Compute Stick STCK1A8LFC[/td] [td]BIOS version 0039 or later[/td] [/tr] [tr][td]Intel® Compute Card CD1M3128MK[/td] [td]BIOS version 0056 or later[/td] [/tr] [tr][td]Intel® Compute Card CD1IV128MK[/td] [td]BIOS version 0036 or later[/td] [/tr] [tr][td]Intel® NUC Kit NUC7i3BNx Intel® NUC Kit NUC7i5BNx Intel® NUC Kit NUC7i7BNx[/td] [td]BIOS version 0079 or later[/td] [/tr] [tr][td]Intel® NUC Kit NUC6i3SYx Intel® NUC Kit NUC6i5SYx[/td] [td]BIOS version 0070 or later[/td] [/tr] [tr][td]Intel® NUC Kit D54250WYx Intel® NUC Kit D34010WYx[/td] [td]BIOS version 0051 or later[/td] [/tr] [/table]

Recommendations:

Intel recommends that users update to the latest firmware version (see provided table).

Acknowledgements:

Intel would like to thank Alexander Ermolov (CVE-2019-11123, CVE-2019-11124, CVE-2019-11125, CVE-2019-11129), Ruslan Zakirov (CVE-2019-11126, CVE-2019-11127), Malyutin Maksim (CVE-2019-11128) for reporting these issues.

Intel, and nearly the entire technology industry, follows a disclosure practice called Coordinated Disclosure, under which a cybersecurity vulnerability is generally publicly disclosed only after mitigations are available.

Revision History

[table][tr]Revision Date Description [/tr] [tr][td]1.0[/td] [td]06/11/2019[/td] [td]Initial Release[/td] [/tr] [/table]
Click to expand...

Source: https://www.intel.com/content/www/us...-sa-00264.html

Brink · Aug 20, 2021

Intel NUC Firmware Security Advisory

[table][tr]Intel ID: INTEL-SA-00176 [/tr] [tr][td]Advisory Category:[/td] [td]Firmware[/td] [/tr] [tr][td]Impact of vulnerability:[/td] [td]Escalation of Privilege, Denial of Service, Information Disclosure[/td] [/tr] [tr][td]Severity rating:[/td] [td]HIGH[/td] [/tr] [tr][td]Original release:[/td] [td]09/11/2018[/td] [/tr] [tr][td]Last revised:[/td] [td]09/11/2018[/td] [/tr] [/table]

Summary:

A potential security vulnerability in firmware for Intel® NUC may allow information disclosure, escalation of privilege and/or denial of service. Intel® is releasing firmware security updates for Intel® NUC Firmware to mitigate this potential vulnerability.

Vulnerability Details

CVEID: CVE-2018-12176

Description: Improper input validation in firmware for Intel® NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial of service via local access.

CVSS Base Score: 8.2 High

CVSS Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Affected Products:

· Intel® NUC Kit NUC7CJYH
· Intel® NUC Kit NUC8i7HNK
· Intel® Compute Card CD1M3128MK
· Intel® Compute Card CD1IV128MK
· Intel® Compute Card CD1P64GK
· Intel® NUC Kit NUC7i7DNKE
· Intel® NUC Kit NUC7i5DNKE
· Intel® NUC Kit NUC7i3DNHE
· Intel® NUC Kit NUC7i7BNH
· Intel® NUC Kit NUC6CAYS
· Intel® NUC Kit DE3815TYBE
· Intel® NUC Kit NUC6i5SYH
· Intel® NUC Kit NUC6i7KYK
· Intel® NUC Kit NUC5PGYH
· Intel® NUC Kit NUC5CPYH
· Intel® NUC Kit NUC5i7RYH
· Intel® NUC Kit NUC5i5MYHE
· Intel® NUC Kit NUC5i3MYHE
· Intel® NUC Kit DE3815TYBE
· Intel® NUC Kit DN2820FYKH
· Intel® NUC Kit D54250WYB
· Intel® NUC Kit D53427RKE
· Intel® NUC Kit D33217GKE
· Intel® Compute Stick STK2mv64CC
· Intel® Compute Stick STK2m3W64CC
· Intel® Compute Stick STK1AW32SC
· Intel® Compute Stick STCK1A32WFC

Recommendations:

Intel recommends that users update to the latest version (see provided table).

[table][tr][td]Product[/td] [td]Download link (BIOS dl link)[/td] [/tr] [tr][td]Intel® NUC Kit NUC7CJYH[/td] [td]NUC7CJYH[/td] [/tr] [tr][td]Intel® NUC Kit NUC8i7HNK[/td] [td]NUC8i7HNK[/td] [/tr] [tr][td]Intel® Compute Card CD1M3128MK[/td] [td]CD1M3128MK[/td] [/tr] [tr][td]Intel® Compute Card CD1IV128MK[/td] [td]CD1IV128MK[/td] [/tr] [tr][td]Intel® Compute Card CD1P64GK[/td] [td]CD1P64GK[/td] [/tr] [tr][td]Intel® NUC Kit NUC7i7DNKE[/td] [td]NUC7i7DNKE[/td] [/tr] [tr][td]Intel® NUC Kit NUC7i5DNKE[/td] [td]NUC7i5DNKE[/td] [/tr] [tr][td]Intel® NUC Kit NUC7i3DNHE[/td] [td]NUC7i3DNHE[/td] [/tr] [tr][td]Intel® NUC Kit NUC7i7BNH[/td] [td]NUC7i7BNH[/td] [/tr] [tr][td]Intel® NUC Kit NUC6CAYS[/td] [td]NUC6CAYS[/td] [/tr] [tr][td]Intel® NUC Kit DE3815TYBE[/td] [td]DE3815TYBE[/td] [/tr] [tr][td]Intel® NUC Kit NUC6i5SYH[/td] [td]NUC6i5SYH[/td] [/tr] [tr][td]Intel® NUC Kit NUC6i7KYK[/td] [td]NUC6i7KYK[/td] [/tr] [tr][td]Intel® NUC Kit NUC5PGYH[/td] [td]NUC5PGYH[/td] [/tr] [tr][td]Intel® NUC Kit NUC5CPYH[/td] [td]NUC5CPYH[/td] [/tr] [tr][td]Intel® NUC Kit NUC5i7RYH[/td] [td]NUC5i7RYH[/td] [/tr] [tr][td]Intel® NUC Kit NUC5i5MYHE[/td] [td]NUC5i5MYHE[/td] [/tr] [tr][td]Intel® NUC Kit NUC5i3MYHE[/td] [td]NUC5i3MYHE[/td] [/tr] [tr][td]Intel® NUC Kit DE3815TYBE[/td] [td]DE3815TYBE[/td] [/tr] [tr][td]Intel® NUC Kit DN2820FYKH[/td] [td]DN2820FYKH[/td] [/tr] [tr][td]Intel® NUC Kit D54250WYB[/td] [td]D54250WYB[/td] [/tr] [tr][td]Intel® NUC Kit D53427RKE[/td] [td]D53427RKE [/td] [/tr] [tr][td]Intel® NUC Kit D33217GKE[/td] [td]D33217GKE[/td] [/tr] [tr][td]Intel® Compute Stick STK2mv64CC[/td] [td]STK2mv64CC[/td] [/tr] [tr][td]Intel® Compute Stick STK2m3W64CC[/td] [td]STK2m3W64CC[/td] [/tr] [tr][td]Intel® Compute Stick STK1AW32SC[/td] [td]STK1AW32SC[/td] [/tr] [tr][td]Intel® Compute Stick STCK1A32WFC[/td] [td]STCK1A32WFC[/td] [/tr] [/table]

Acknowledgements:

Intel would like to thank Ruslan Zakirov and Alexander Ermolov for reporting this issue and working with us on coordinated disclosure.

Revision History

[table][tr]Revision Date Description [/tr] [tr][td]1.0[/td] [td]09/11/2018[/td] [td]Initial Release[/td] [/tr] [/table]
Click to expand...

Source: INTEL-SA-00176

Windows 10: Intel NUC Firmware update

Intel NUC Firmware update

Intel NUC Firmware update

Intel NUC Firmware update

Intel NUC Firmware update - Similar Threads - Intel NUC Firmware

Intel NUC Firmware update

New intel nuc

Intel NUC Firmware Vulnerability Advisory - Oct. 8

Intel NUC Firmware Vulnerability Advisory

Intel NUC Firmware Advisory

Intel NUC Firmware Security Advisory - Jan. 8

Intel NUC Firmware Security Advisory

Intel Introduces New NUC Kits and NUC Mini PCs to the Intel NUC Family

Intel NUC