Intel Sicherheitsproblem diverser NUC Mini-PCs

Die Intel Mini-PCs mit einer Kantenlänge von 10cm haben aktuell ein Problem im BIOS /UEFI. Die Schwachstelle beschreibt das CVE-2018-12176. Demnach wird eine Eingabe in der Firmware im BIOS nicht ausreichend überprüft. Dadurch kann ein Angreifer eine fehlerhafte signierte Firmware einspielen und dadurch beliebigen Code ausführen, Informationen abgreifen, Berechtigungen verwalten und ein Denial-of-Service (DoS) durchführen.

Gefunden hat die Lücke der Sicherheitsfürscher Embdi die er im Detail unter https://embedi.org/blog/nuclear-explotion/ beschreibt. Der Experte schreibt, dass für diesen Angriff physischer Zugang mit administrativen Rechten, zum System bestehen muss.

Intel hat die Schwachstelle mit 8,2 von 10 bewertet und ein Firmwareupdate der betroffenen NUC-Systeme veröffentlicht. Das Update ist im Detail unter https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00176.html beschrieben.

Betroffen sind laut Intel Security Advisory folgende Modelle der Reihe NUC:

• Intel® NUC Kit NUC7CJYH
• Intel® NUC Kit NUC8i7HNK
• Intel® Compute Card CD1M3128MK
• Intel® Compute Card CD1IV128MK
• Intel® Compute Card CD1P64GK
• Intel® NUC Kit NUC7i7DNKE
• Intel® NUC Kit NUC7i5DNKE
• Intel® NUC Kit NUC7i3DNHE
• Intel® NUC Kit NUC7i7BNH
• Intel® NUC Kit NUC6CAYS
• Intel® NUC Kit DE3815TYBE
• Intel® NUC Kit NUC6i5SYH
• Intel® NUC Kit NUC6i7KYK
• Intel® NUC Kit NUC5PGYH
• Intel® NUC Kit NUC5CPYH
• Intel® NUC Kit NUC5i7RYH
• Intel® NUC Kit NUC5i5MYHE
• Intel® NUC Kit NUC5i3MYHE
• Intel® NUC Kit DE3815TYBE
• Intel® NUC Kit DN2820FYKH
• Intel® NUC Kit D54250WYB
• Intel® NUC Kit D53427RKE
• Intel® NUC Kit D33217GKE
• Intel® Compute Stick STK2mv64CC
• Intel® Compute Stick STK2m3W64CC
• Intel® Compute Stick STK1AW32SC
• Intel® Compute Stick STCK1A32WFC

technische Daten Intel NUC7I5BNH /
NUC7i5BNK

Processor	Intel® Core™ i5-7260U processor (2.2 GHz to 3.4 GHz Turbo,1 Dual-Core 4 MB cache, 15W TDP)
Graphics	Intel® Iris™ Plus Graphics 640One HDMI* 2.0 port with 4K at 60 HzThunderbolt™ 3 port with support for USB* 3.1 Gen 2, DisplayPort* 1.2 and 40 Gb/s Thunderbolt
System Memory	Two DDR4 SO-DIMM sockets (up to 32 GB, 2133 MHz), 1.2V
Storage Capabilities	NUC7i5BNHMicro SDXC slot with UHS-I support on the sideOne M.2 connector supporting 22×42 or 22×80 M.2 SSDOne SATA3 port for connection to 2.5″ HDD or SSD (up to 9.5 mm thickness)NUC7i5BNKMicro SDXC slot with UHS-I support on the sideOne M.2 connector supporting 22×42 or 22×80 M.2 SSD
Peripheral Connectivity	Intel® Gigabit LANThunderbolt 3 port with support for USB* 3.1 Gen 2, DisplayPort* 1.2 and 40 Gb/s Thunderbolt Four Super Hi-Speed USB 3.0 ports (two back panel ports and two front ports including one charging port)Two additional Hi-Speed USB 2.0 ports via internal headerIntel® Dual Band Wireless-AC 8265 (802.11ac), 2×2, up to 867 MbpsDual Mode Bluetooth* 4.2
System BIOS	64 Mb Flash EEPROM with Intel® Platform Innovation Framework for EFI Plug and PlayAdvanced configuration and power interface V3.0b, SMBIOS2.5Intel® Visual BIOSIntel® Express BIOS update support
Hardware Management Features	Processor fan speed controlVoltage and temperature sensingFan sensor inputs used to monitor fan activityACPI-compliant power management control
Expansion Capabilities	Two Internal USB 2.0 ports via two 1×4 headers (for replaceable lid support)One AUX_PWR headerOne Consumer Electronics Control header
Audio	Up to 7.1 surround audio via HDMIHeadphone/microphone jack on the front panelDual-array microphones on the front panel
Front Panel Header	Reset, HDD LED, Power LEDs, power on/off
Mechanical Chassis Size	NUC7i5BNH4.53″ x 4.37″ x 2.01″115 mm x 111 mm x 51 mmNUC7i5BNK4.53″ x 4.37″ x 1.38″115 mm x 111 mm x 35 mm
Baseboard Power Requirements	19V, 65W wall-mount AC-DC power adapter
Environment Operating Temperature	0° C to +40° C
Storage Temperature	-20° C to +60° C
Product Safety Regulations and Standards	IEC 60950-1UL 60950-1EN 60950-1CAN/CSA-C22.2 No. 60950-1
EMC/RF Regulations and Standards (Class B)	CISPR 32FCC CFR Title 47, Chapter I, Part 15, Subparts B, C, EICES-003EN 55032EN 55024ETSI EN 300 328ETSI EN 301 489-1ETSI EN 301 489-17ETSI EN 301 893EN 62311AS/NZS 2772.2AS/NZS 4268VCCI V-2, V-3, V-4KN-32KN-24CNS 13438
Environmental Regulations	RoHS Directive 2011/65/EUWEEE Directive 2012/19/EUChina RoHS – Management Methods for Restricted Use of Hazardous Substances in Electrical and Electronic Products

Quelle: https://www.intel.com.au/content/www/au/en/products/docs/boards-kits/nuc/nuc-kit-nuc7i5bnh-nuc7i5bnk-brief.html