Windows 10: Intel PROSet Wireless WiFi Software Advisory

Brink · Jun 12, 2019 at 1:22 PM

Intel ID: INTEL-SA-00232 Advisory Category: Software Impact of vulnerability: Denial of Service Severity rating: MEDIUM Original release: 06/11/2019 Last revised: 06/11/2019
Summary:

A potential security vulnerability in Intel® PROSet/Wireless WiFi Software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability.

Vulnerability Details:

CVEID: CVE-2019-0136
Description: Insufficient access control in the Intel(R) PROSet/Wireless WiFi Software driver before version 21.10 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Base Score: 4.7 Medium
CVSS Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

Affected Products:

Intel® PROSet/Wireless WiFi Software releases before version 21.10 for Microsoft Windows 7, 8.1 and 10:
-Intel® Dual Band Wireless-AC 3160
-Intel® Dual Band Wireless-AC 7260
-Intel® Dual Band Wireless-N 7260
-Intel® Wireless-N 7260
-Intel® Dual Band Wireless-AC 7260 for Desktop
-Intel® Dual Band Wireless-AC 7265 (Rev. C)
-Intel® Dual Band Wireless-N 7265 (Rev. C)
-Intel® Wireless-N 7265 (Rev. C)
-Intel® Dual Band Wireless-AC 3165
-Intel® Dual Band Wireless-AC 7265 (Rev. D)
-Intel® Dual Band Wireless-N 7265 (Rev. D)
-Intel® Wireless-N 7265 (Rev. D)
-Intel® Dual Band Wireless-AC 3168
-Intel® Tri-Band Wireless-AC 17265
-Intel® Dual Band Wireless-AC 8260
-Intel® Tri-Band Wireless-AC 18260
-Intel® Dual Band Wireless-AC 8265
-Intel® Dual Band Wireless-AC 8265 Desktop Kit
-Intel® Tri-Band Wireless-AC 18265
-Intel® Wireless-AC 9560
-Intel® Wireless-AC 9461
-Intel® Wireless-AC 9462
-Intel® Wireless-AC 9260
-Intel® Wi-Fi 6 AX200
-Intel® Wi-Fi 6 AX201

For Google Chrome OS:
An Intel® WiFi driver resolving the vulnerability will be up streamed to Chromium on June 11th, 2019.
-Intel® Dual Band Wireless-AC 7260
-Intel® Dual Band Wireless-AC 7265 (Rev.D)
-Intel® Wireless-AC 9560

For Linux OS:
An Intel® WiFi driver resolving the vulnerability will be up streamed on June 11th, 2019.
-Intel® Dual Band Wireless-AC 3160
-Intel® Dual Band Wireless-AC 7260
-Intel® Dual Band Wireless-N 7260
-Intel® Wireless-N 7260
-Intel® Dual Band Wireless-AC 7260 for Desktop
-Intel® Dual Band Wireless-AC 7265 (Rev. C)
-Intel® Dual Band Wireless-N 7265 (Rev. C)
-Intel® Wireless-N 7265 (Rev. C)
-Intel® Dual Band Wireless-AC 3165
-Intel® Dual Band Wireless-AC 7265 (Rev. D)
-Intel® Dual Band Wireless-N 7265 (Rev. D)
-Intel® Wireless-N 7265 (Rev. D)
-Intel® Dual Band Wireless-AC 3168
-Intel® Tri-Band Wireless-AC 17265
-Intel® Dual Band Wireless-AC 8260
-Intel® Tri-Band Wireless-AC 18260
-Intel® Dual Band Wireless-AC 8265
-Intel® Dual Band Wireless-AC 8265 Desktop Kit
-Intel® Tri-Band Wireless-AC 18265
-Intel® Wireless-AC 9560
-Intel® Wireless-AC 9461
-Intel® Wireless-AC 9462
-Intel® Wireless-AC 9260
-Intel® Wi-Fi 6 AX200
-Intel® Wi-Fi 6 AX201

Recommendations:

For Microsoft Windows:

Intel recommends using Intel® PROSet/Wireless WiFi Software version 21.10 or later.

Download Intel(R) PROSet/Wireless Software and Wi-Fi Drivers

For Google Chrome OS or Linux:

Intel recommends that users of Intel® PROSet/Wireless WiFi Software update to the latest version provided by the OS supplier that addresses these issues.

Acknowledgements:

Intel would like to thank JPCERT for reporting this issue.

Intel, and nearly the entire technology industry, follows a disclosure practice called Coordinated Disclosure, under which a cybersecurity vulnerability is generally publicly disclosed only after mitigations are available.

Revision History

Revision Date Description 1.0 06/11/2019 Initial Release
Click to expand...

Source: INTEL-SA-00232

:)

Brink · Jun 12, 2019 at 1:34 PM

Intel PROSet Wireless WiFi Software Advisory - Nov. 13

[table][tr]Intel ID: INTEL-SA-00188 [/tr] [tr][td]Advisory Category:[/td] [td]Software[/td] [/tr] [tr][td]Impact of vulnerability:[/td] [td]Escalation of Privilege, Denial of Service, Information Disclosure[/td] [/tr] [tr][td]Original release:[/td] [td]11/13/2018[/td] [/tr] [tr][td]Last revised:[/td] [td]11/13/2018[/td] [/tr] [/table]

Summary:

Multiple potential security vulnerabilities in Cisco Compatible eXtensions (CCX) component in Intel® PROSet/Wireless WiFi Software may allow escalation of privilege, denial of service and/or information disclosure. Intel is releasing PROSet/Wireless WiFi Software updates to mitigate this potential vulnerability.

Vulnerability Details:

Due to vulnerabilities in OpenSSL version 0.9.8e compiled into the Cisco Compatible eXtensions (CCX) component, which is part of the Intel® PROSet/Wireless WiFi Software, Intel is announcing End-of-Life (EOL) support for CCX. The CCX component has been removed from the Intel® PROSet/Wireless WiFi Software v20.90.0.7 for Microsoft Windows* 7, 8.1 and 10.

Affected Products:

Intel® PROSet/Wireless WiFi Software prior to version 20.90.

Recommendations:

Intel recommends that users of Intel® PROSet/Wireless WiFi Software update to 20.90 or later.

Updates are available for download at this location: https://downloadcenter.intel.com/pro...ess-Networking

Acknowledgements:

Intel would like to thank Huawei for reporting this issue and working with us on coordinated disclosure.

Revision History

[table][tr]Revision Date Description [/tr] [tr][td]1.0[/td] [td]11/13/2018[/td] [td]Initial Release[/td] [/tr] [/table]
Click to expand...

Source: INTEL-SA-00188

Brink · Jun 12, 2019 at 1:34 PM

Intel PROSet Wireless WiFi Software Advisory - May 14

[table][tr]Intel ID: INTEL-SA-00204 [/tr] [tr][td]Advisory Category:[/td] [td]Software[/td] [/tr] [tr][td]Impact of vulnerability:[/td] [td]Escalation of Privilege[/td] [/tr] [tr][td]Severity rating:[/td] [td]MEDIUM[/td] [/tr] [tr][td]Original release:[/td] [td]05/14/2019[/td] [/tr] [tr][td]Last revised:[/td] [td]05/14/2019[/td] [/tr] [/table]

Summary:

A potential security vulnerability in the Intel® PROSet/Wireless WiFi Software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability.

Vulnerability Details:

CVEID: CVE-2018-3701
Description: Improper directory permissions in the installer for Intel(R) PROSet/Wireless WiFi Software version 20.100 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Base Score: 6.5 Medium
CVSS Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Affected Products:

Intel® PROSet/Wireless WiFi Software version 20.100 and before.

Recommendations:

Intel recommends using Intel® PROSet/Wireless WiFi version 21.0 or later.

Updates are available for download at this location:
Download Intel(R) PROSet/Wireless Software and Wi-Fi Drivers

Acknowledgements:

Intel would like to thank Stefan Kanthak for reporting this issue.

Intel, and nearly the entire technology industry, follows a disclosure practice called Coordinated Disclosure, under which a cybersecurity vulnerability is generally publicly disclosed only after mitigations are available.

Revision History

[table][tr]Revision Date Description [/tr] [tr][td]1.0[/td] [td]05/14/2019[/td] [td]Initial Release[/td] [/tr] [/table]
Click to expand...

Source: INTEL-SA-00204

Brink · Jun 12, 2019 at 1:34 PM

Intel PROSet/Wireless WiFi Software Advisory - Jan. 8

[table][tr]Intel ID: INTEL-SA-00182 [/tr] [tr][td]Advisory Category:[/td] [td]Software[/td] [/tr] [tr][td]Impact of vulnerability:[/td] [td]Escalation of Privilege[/td] [/tr] [tr][td]Severity rating:[/td] [td]HIGH[/td] [/tr] [tr][td]Original release:[/td] [td]01/08/2019[/td] [/tr] [tr][td]Last revised:[/td] [td]01/08/2019[/td] [/tr] [/table]

Summary:

A potential security vulnerability in Intel® PROSet/Wireless WiFi Software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability.

Vulnerability Details:

CVEID: CVE-2018-12177

Description: Improper directory permissions in the ZeroConfig service in Intel(R) PROSet/Wireless WiFi Software before version 20.90.0.7 may allow an authorized user to potentially enable escalation of privilege via local access.

CVSS Base Score: 7.8 High

CVSS Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products:

Intel wireless products and technologies before 20.90.0.7.
· Intel® Dual Band Wireless-AC 3160
· Intel® Dual Band Wireless-AC 7260
· Intel® Dual Band Wireless-N 7260
· Intel® Wireless-N 7260
· Intel® Dual Band Wireless-AC 7260 for Desktop
· Intel® Dual Band Wireless-AC 7265 (Rev. C)
· Intel® Dual Band Wireless-N 7265 (Rev. C)
· Intel® Wireless-N 7265 (Rev. C)
· Intel® Dual Band Wireless-AC 3165
· Intel® Dual Band Wireless-AC 7265 (Rev. D)
· Intel® Dual Band Wireless-N 7265 (Rev. D)
· Intel® Wireless-N 7265 (Rev. D)
· Intel® Dual Band Wireless-AC 3168
· Intel® Tri-Band Wireless-AC 17265
· Intel® Dual Band Wireless-AC 8260
· Intel® Tri-Band Wireless-AC 18260
· Intel® Dual Band Wireless-AC 8265
· Intel® Dual Band Wireless-AC 8265 Desktop Kit
· Intel® Tri-Band Wireless-AC 18265
· Intel® Wireless-AC 9560
· Intel® Wireless-AC 9461
· Intel® Wireless-AC 9462
· Intel® Wireless-AC 9260

Recommendations:

Intel recommends updating the Intel® PROSet/Wireless WiFi Software to 20.90.0.7 or later.

Updates are available for download at these locations:

· Check with your system manufacturer support site for the latest available verion, 20.90.0.7 or later.

Or

· https://downloadcenter.intel.com/pro...eless-Software

Acknowledgements:

Intel would like to thank Thomas Hibbert of Insomnia Security for reporting this issue and working with us on coordinated disclosure.

Intel, and nearly the entire technology industry, follows a disclosure practice called Coordinated Disclosure, under which a cybersecurity vulnerability is generally publicly disclosed only after mitigations are deployed.

Revision History

[table][tr]Revision Date Description [/tr] [tr][td]1.0[/td] [td]01/08/2019[/td] [td]Initial Release[/td] [/tr] [/table]
Click to expand...

Source: INTEL-SA-00182

Windows 10: Intel PROSet Wireless WiFi Software Advisory

Intel PROSet Wireless WiFi Software Advisory

Intel PROSet Wireless WiFi Software Advisory

Intel PROSet Wireless WiFi Software Advisory

Intel PROSet Wireless WiFi Software Advisory - Similar Threads - Intel PROSet Wireless

Intel Chipset Device Software (INF Update Utility) Advisory

Intel PROSet Wireless WiFi Software Advisory - May 14

Intel PROSet Wireless Driver Denial of Service Advisory - Feb. 12

Intel SGX Platform Software and Intel SGX SDK Advisory - Jan. 8

Intel PROSet/Wireless WiFi Software Advisory - Jan. 8

Intel PROSet/wirelass software

Intel PROSet Wireless WiFi Software Advisory - Nov. 13

Intel Driver & Support Assistant and Software Asset Manager Advisory

Intel (R) PRO Set Wireless software