Intel Releases Security Updates 11 Feb 2020

ronjor · Feb 11, 2020

Original release date: February 11, 2020

Intel has released security updates to address vulnerabilities in multiple products. An attacker could exploit these vulnerabilities to gain escalation of privileges.
The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the following Intel advisories and apply the necessary updates:

RWC3 Advisory INTEL-SA-00341
MPSS Advisory INTEL-SA-00340
RWC2 Advisory INTEL-SA-00339
SGX SDK Advisory INTEL-SA-00336
CSME Advisory INTEL-SA-00307
Renesas Electronics USB 3.0 Driver Advisory INTEL-SA-00273
Click to expand...

guest · Feb 11, 2020

Intel Patches High-Severity Flaw in Security Engine
February 11, 2020
https://threatpost.com/intel-patches-high-severity-flaw-in-security-engine/152794/

Intel is warning of a high-severity flaw in the firmware of its converged security and management engine (CSME), which if exploited could allow privilege escalation, denial of service and information disclosure.
CSME powers Intel’s Active Management System hardware and firmware technology, used for remote out-of-band management in consumer or corporate PCs, Internet of Things (IoT) devices, and workstations.

“Intel recommends updating to Intel CSME versions 12.0.49, 13.0.21, and 14.0.11 or later provided by the system manufacturer that addresses these issues,” according to Intel’s advisory. “Intel recommends IOT customers using Intel CSME version 12.0.55 to update to 12.0.56 or later provided by the system manufacturer that addresses these issues.”
Other Flaws
Overall, Intel patched six flaws on Tuesday, including the high-severity flaw in CSME. The remainder of the vulnerabilities were medium and low-severity.
Click to expand...

Log in or Sign up

Intel Releases Security Updates 11 Feb 2020

ronjor Global Moderator

guest Guest

Log in or Sign up

Intel Releases Security Updates 11 Feb 2020

ronjor Global Moderator

guest Guest

Useful Searches