Intel® NUC Kit with Infineon Trusted Platform Module
Intel ID: INTEL-SA-00104
Product family: Intel® NUC Kit
Impact of vulnerability: Information Disclosure
Severity rating: Important
Original release: Jan 16, 2018
Last revised: Jan 16, 2018
Certain Intel® NUC systems contain an Infineon Trusted Platform Module (TPM) that has an information disclosure vulnerability as described in CVE-2017-15361.
Recently, a research team developed advanced mathematical methods to exploit the characteristics of acceleration algorithms for prime number finding, which are common practice today for RSA key generation. For more information please reference the public advisory issued by Infineon.
Intel highly recommends users make sure they have the appropriate Windows operating system patches to work around this vulnerability.
For customers that require a firmware upgrade please contact Intel Customer Support at https://www.intel.com/content/www/us/en/support.html for assistance.
All newly manufactured Intel® NUC systems that contain the Infineon TPM have been updated with the updated firmware from Infineon.
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00104&languageid=en-fr
