SUPPORT COMMUNICATION- SECURITY BULLETIN HPSBHF03679 rev. 2 - Intel® Wireless Bluetooth August 2020 Security Updates

Denial of Service, Information Disclosure, Escalation of Privilege

Source: HP, HP Product Security Response Team (PSRT)

Reported By: Intel

Intel has informed HP of potential security vulnerabilities in some Intel® Wireless Bluetooth® software which may allow denial of service, information disclosure or escalation of privilege. Intel is releasing firmware and software updates to mitigate these potential vulnerabilities.

INTEL-SA-00337 Intel® Wireless Bluetooth® Advisory (in English): CVE-2020-0553, CVE-2020-0554, CVE-2020-0555, CVE-2019-14620; PSR-2020-0177

See RESOLUTION section for impacted products.

For a PGP signed version of this security bulletin please write to: hp-security-alert@hp.com

CVSS 3.1 Base Metrics

Intel has released updates to mitigate the potential vulnerabilities. HP has identified the affected platforms and the corresponding SoftPaq with the minimum versions that might mitigate the potential vulnerability. See the affected platforms listed below.

Newer versions may become available and the minimum versions listed below may become obsolete.  If a SoftPaq Link becomes invalid, check the HP Customer Support - Software and Driver Downloads site to obtain the latest update for your product model.

note:

This bulletin might be updated when new information and/or SoftPaqs are available. Sign up for HP Subscriptions to be notified and receive:

• Product support eAlerts
• Driver updates
• Security bulletin updates

HP recommends keeping your system up to date with the latest firmware and software.

Intel® Wireless Bluetooth® products with affected software:

• Intel®Wi-Fi 6 AX201
• Intel® Wi-Fi 6 AX200
• Intel® Wireless-AC 9560
• Intel® Wireless-AC 9462
• Intel® Wireless-AC 9461
• Intel® Wireless-AC 9260
• Intel® Dual Band Wireless-AC 8265
• Intel® Dual Band Wireless-AC 8260
• Intel® Dual Band Wireless-AC 3168
• Intel® Wireless 7265 (Rev D) Family
• Intel® Dual Band Wireless-AC 3165

Pending: Softpaq is in progress.

Under investigation: System under investigation for impact, or Softpaq under investigation for feasibility/availability.

Not available: Softpaq not available due to technical or logistical constraints.

Check support page: The listed SoftPaq has been removed from download site. SoftPaqs with newer versions may be available on the HP Customer Support - Software and Driver Downloads site.