Contents
Are there security vulnerabilities in the Intel Management Engine?
Intel has identified security vulnerabilities that could potentially impact certain PCs, servers, and IoT platforms. Systems using Intel ME Firmware versions 6.x-11.x, servers using SPS Firmware version 4.0, and systems using TXE version 3.0 are impacted. You may find these firmware versions on certain processors from the:
Are there any Intel CPUs without vPro support?
Intel CPUs without vPro support therefore do not seem vulnerable to this attack as they lack the vulnerable firmware. Thanks for contributing an answer to Information Security Stack Exchange! Please be sure to answer the question.
Can you use AMT on a CPU without vPro?
AMT is part of the Intel’s vPro offering and is not available on non-vPro devices like “consumer PCs with consumer firmware” and “Intel servers utilizing Intel® Server Platform Services (Intel® SPS)”. Intel CPUs without vPro support therefore do not seem vulnerable to this attack as they lack the vulnerable firmware.
Are there bugs in the Intel Management Engine?
The platform has a lot of useful features for IT managers, but it requires deep system access that offers a tempting target for attackers; compromising the Management Engine could lead to full control of a given computer. Now, after several research groups have uncovered ME bugs, Intel has confirmed that those worst-case fears may be possible.
How did Intel find the management engine flaws?
Intel found the vulnerabilities after conducting a security audit spurred by recent research. It has also published a Detection Tool so Windows and Linux administrators can check their systems to see if they’re exposed.
Is the Intel Management Engine critical firmware update available?
A: Intel has provided system and motherboard manufacturers with the necessary firmware and software updates to resolve the vulnerabilities identified in Security Advisory Intel-SA-00086. Contact your system or motherboard manufacturer regarding their plans for making the updates available to end users.
What to do about Intel CSME version detection tool?
Q: The Intel CSME Version Detection Tool reports that my system is vulnerable. What do I do? A: Intel has provided system and motherboard manufacturers with the necessary firmware and software updates to resolve the vulnerabilities identified in Security Advisory Intel-SA-00086.