Intel Security Advisories (April 14, 2020)

[German]Intel has published several security advisories about vulnerabilities in products in the Product Security Center on April 14, 2020. This ranges from drivers to NUC firmware and also includes product discontinuations.

These publications can be found in the Product Security Center. Here is an excerpt of what is new as of April 14, 2020

• Intel® NUC Firmware Advisory (INTEL-SA-00363): A potential security vulnerability in system firmware for some Intel® NUC may allow escalation of privilege. Intel is releasing a firmware update to mitigate this potential vulnerability.
• Intel® Binary Configuration Tool for Windows Advisory (INTEL-SA-00359): A potential security vulnerability in the Intel® Binary Configuration Tool for Windows may allow escalation of privilege.  Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for the Intel® Binary Configuration Tool for Windows.
• Intel® Modular Server Compute Module Advisory (INTEL-SA-00351): A potential security vulnerability in Intel® Modular Server MFS2600KISPP Compute Module may allow escalation of privilege or denial of service. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for Intel® Modular Server MFS2600KISPP Compute Module.
• Intel® Driver and Support Assistant Advisory (INTEL-SA-00344): A potential security vulnerability in the Intel® Driver and Support Assistant may allow denial of service. A race condition in the Intel(R) Driver and Support Assistant before version 20.1.5 may allow an authenticated user to potentially enable denial of service via local access. Intel is releasing software updates to mitigate this potential vulnerability.
• Intel® PROSet/Wireless WiFi Software Advisory (INTEL-SA-00338): Potential security vulnerabilities in some Intel® PROSet/Wireless WiFi products may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities.
• Intel® Data Migration Software Advisory (INTEL-SA-00327): A potential security vulnerability in Intel® Data Migration Software may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for Intel® Data Migration Software.

Details can be found in the respective linked individual pages with the safety instructions. (via)