Intel IME Vunrability.

Discussion of non-phpBB related topics with other phpBB.com users.
Forum rules
General Discussion is a bonus forum for discussion of non-phpBB related topics with other phpBB.com users. All site rules apply.
Post Reply
User avatar
HiFiKabin
Community Team Member
Community Team Member
Posts: 2303
Joined: Wed May 14, 2014 9:10 am
Location: Swearing at the PC, UK
Name: James
Contact:

Intel IME Vunrability.

Post by HiFiKabin » Tue Dec 05, 2017 11:17 am

The Intel Intel Management Engine (IME) is a microprocessor that does "stuff" in the background while your PC is booting up, closing down, and some bits in the middle as well.
On Monday, the chipmaker released a security advisory that lists new vulnerabilities in ME, as well as bugs in the remote server management tool Server Platform Services, and Intel’s hardware authentication tool Trusted Execution Engine. Intel found the vulnerabilities after conducting a security audit spurred by recent research. It has also published a Detection Tool so Windows and Linux administrators can check their systems to see if they're exposed.
To check if your Intel PC is affected, first go to https://downloadcenter.intel.com/download/27150 and download the Intel-SA-00086 Detection Tool. Unzip it, Double click the icon as the screenshot. That will then run and give you an output similar to the 2nd screenshot.


screenshot_100.jpg
screenshot_101.jpg


Should your computer prove to be be vulnerable, go to https://www.intel.com/content/www/us/en ... tware.html to find your Computers/Motherboards support site and then you can find the download suitable for your system. Check carefully as some downloads may not be available yet.


NOTE This affects INTEL only. It does not apply to AMD powered machines

User avatar
david63
Jr. Extension Validator
Posts: 13123
Joined: Thu Dec 19, 2002 8:08 am
Location: Lancashire, UK
Name: David Wood
Contact:

Re: Intel IME Vunrability.

Post by david63 » Tue Dec 05, 2017 11:47 am

Thanks for that - I think :o :o

User avatar
AmigoJack
Registered User
Posts: 4991
Joined: Tue Jun 15, 2010 11:33 am
Location: グリーン ヒル ゾーン
Contact:

Re: Intel IME Vunrability.

Post by AmigoJack » Wed Dec 06, 2017 8:34 am

HiFiKabin wrote:
Tue Dec 05, 2017 11:17 am
Intel IME Vunrability
Intel Intel Management Engine (IME)
Both is tautologic, just like "ATM machine" and "phpBB board" and "pre-programmed".

User avatar
canonknipser
Registered User
Posts: 1172
Joined: Thu Sep 08, 2011 4:16 am
Location: Germany
Name: Frank Jakobs
Contact:

Re: Intel IME Vunrability.

Post by canonknipser » Wed Dec 06, 2017 9:08 am

Thanks for that - got a
This system is not vulnerable.
:P

Edit:
AmigoJack wrote:
Wed Dec 06, 2017 8:34 am
Both is tautologic, just like "ATM machine" and "phpBB board" and "pre-programmed".
don't forget PHP :D

User avatar
HiFiKabin
Community Team Member
Community Team Member
Posts: 2303
Joined: Wed May 14, 2014 9:10 am
Location: Swearing at the PC, UK
Name: James
Contact:

Re: Intel IME Vunrability.

Post by HiFiKabin » Wed Dec 06, 2017 9:43 am

AmigoJack wrote:
Wed Dec 06, 2017 8:34 am
HiFiKabin wrote:
Tue Dec 05, 2017 11:17 am
Intel IME Vunrability
Intel Intel Management Engine (IME)
Both is tautologic, just like "ATM machine" and "phpBB board" and "pre-programmed".
Don't you just hate a smart arse :P

User avatar
AmigoJack
Registered User
Posts: 4991
Joined: Tue Jun 15, 2010 11:33 am
Location: グリーン ヒル ゾーン
Contact:

Re: Intel IME Vunrability.

Post by AmigoJack » Wed Dec 06, 2017 10:00 am

canonknipser wrote:
Wed Dec 06, 2017 9:08 am
don't forget PHP :D
Recursivity and tautology are different things, see also GNU and LAME.

HiFiKabin wrote:
Wed Dec 06, 2017 9:43 am
Don't you just hate a smart arse :P
Never understood why obvious mistakes such as writing "Intel Intel" should be more accepted than people spotting mistakes...

User avatar
posey
Registered User
Posts: 546
Joined: Tue Oct 06, 2009 7:34 pm
Location: The Netherlands
Name: Gijs

Re: Intel IME Vunrability.

Post by posey » Thu Dec 07, 2017 4:50 pm

Thanks for this!!
Ran it, my system was vulnerable, of course my system wasn't in the standard list, but after a solid 30 minutes with tech support they got me the correct update.

Thanks for sharing :-)

Post Reply

Return to “General Discussion”

Who is online

Users browsing this forum: No registered users and 44 guests