Intel NUC Firmware Open to Privilege Escalation, DoS and Information Disclosure

[silversurfer]

Intel has patched seven high-severity vulnerabilities in the system firmware of its Intel NUC (short for Next Unit of Computing), a mini-PC kit used for gaming, digital signage and more.
 
Overall, the chip-maker patched 25 vulnerabilities across various platforms this week – including eight high-severity flaws, 13 medium-severity flaws and four low-severity glitches. The majority of the high-severity flaws resided in the system firmware of Intel’s NUC mini PC kit, which offers processing, memory and storage capabilities for applications like digital signage, media centers and kiosks.
 
“Potential security vulnerabilities in system firmware for Intel NUC may allow escalation of privilege, denial of service and/or information disclosure,” according to Intel’s Tuesday advisory. “Intel is releasing firmware updates to mitigate these potential vulnerabilities.”

SOURCE: https://threatpost.com/intel-patches-nuc...re/145620/