EVGA

Intel Chip Flaws Leave Millions of Devices Exposed.....

Author
wmmills
CLASSIFIED ULTRA Member
  • Total Posts : 5679
  • Reward points : 0
  • Joined: 2006/01/04 20:47:29
  • Location: New Jersey
  • Status: offline
  • Ribbons : 40
2017/11/21 11:40:45 (permalink)
I didn't see this up here so im throwin it up since its pretty important. https://www.wired.com/story/intel-management-engine-vulnerabilities-pcs-servers-iot/  
 
"The newly disclosed vulnerabilities can cause instability or system crashes. They can be used to impersonate the ME, Server Platform Services, and Trusted Execution Engine to erode security verifications. And Intel says they can even be used to “load and execute arbitrary code outside the visibility of the user and operating system.” This is the crucial danger of the ME. If exploited, it can operate totally separate from the main computer, meaning that many ME attacks wouldn’t raise red flags."
 
Have a nice day folks. 

MOBO: EVGA x299 Dark, CPU: I9 10900X, RAM: Patriot Viper RGB 3600 32gb, SSD: Samsung 860 EVO 1TB, M2: Samsung 970 EVO+ 1TB, PSU: CoolerMaster M2 1500, CPU HSF: EVGA 240 CLC HSF~ P/P EK Furious Vardar, G-CARD:EVGA RTX3090 FTW3 Ultra Gaming w/Hybrid kit and Noctua IPPC 3000 P/P, CASE: LIAN-LI PC-V2010B w/ Window mod, OS: Windows 10 Pro 64bit, MON: Alienware AW3821DW

 New EVGA product? Register it NOW with this link:
http://www.evga.com/register/default.asp?affiliatecode=4QFQRAMOII
 Help Our Vets From K-2!
[link=https://strongholdfreedom
#1

12 Replies Related Threads

    jfw06013
    SSC Member
    • Total Posts : 586
    • Reward points : 0
    • Joined: 2017/02/14 10:26:10
    • Status: offline
    • Ribbons : 4
    Re: Intel Chip Flaws Leave Millions of Devices Exposed..... 2017/11/22 03:02:47 (permalink)
    and only the motherboard manufactures can resolve the problem.
    Does EVGA has done this?


    #2
    jfw06013
    SSC Member
    • Total Posts : 586
    • Reward points : 0
    • Joined: 2017/02/14 10:26:10
    • Status: offline
    • Ribbons : 4
    Re: Intel Chip Flaws Leave Millions of Devices Exposed..... 2017/11/22 03:07:09 (permalink)
    I have bought the X99 Classified and the X99 FTW motherboards this year and was wondering it they have a patch for this problem.


    #3
    Cool GTX
    EVGA Forum Moderator
    • Total Posts : 31001
    • Reward points : 0
    • Joined: 2010/12/12 14:22:25
    • Location: Folding for the Greater Good
    • Status: offline
    • Ribbons : 122
    Re: Intel Chip Flaws Leave Millions of Devices Exposed..... 2017/11/22 10:30:02 (permalink)
    3 Excerpts below (from article OP posted)
     
    "new vulnerabilities in ME, as well as bugs in the remote server management tool Server Platform Services, and Intel’s hardware authentication tool Trusted Execution Engine."
     
    "The researchers also play with a sinister property of the ME: It can run even when a computer is “off” (just so long as the device is plugged in), because it is on a separate microprocessor, and essentially acts as a totally separate computer."
     
    "The good news is that most of the vulnerabilities require local access to exploit; someone has to have hands on a device or deep in a network."
     
    So if remote admin is Off, does that make it safe ?

    Learn your way around the EVGA Forums, Rules & limits on new accounts Ultimate Self-Starter Thread For New Members

    I am a Volunteer Moderator - not an EVGA employee

    https://foldingathome.org -->become a citizen scientist and contribute your compute power to help fight global health threats

    RTX Project EVGA X99 FTWK Nibbler EVGA X99 Classified EVGA 3080Ti FTW3 Ultra


    #4
    EVGA_Lee
    Moderator
    • Total Posts : 4247
    • Reward points : 0
    • Joined: 2016/11/04 14:43:35
    • Location: Brea, CA
    • Status: offline
    • Ribbons : 14
    Re: Intel Chip Flaws Leave Millions of Devices Exposed..... 2017/11/22 11:30:12 (permalink)
    For what it's worth, we are aware of these reports and our engineering teams are checking with Intel to see what needs to be done, if anything.  Keep in mind that the vulnerability may not necessarily affect the type (i.e. market segment) of motherboards that EVGA sells.  As noted, however, we're looking into this and will provide updates when we can.
    #5
    KeksimusMaximus
    New Member
    • Total Posts : 87
    • Reward points : 0
    • Joined: 2017/08/18 11:29:38
    • Status: offline
    • Ribbons : 3
    Re: Intel Chip Flaws Leave Millions of Devices Exposed..... 2017/11/22 13:15:43 (permalink)
    Here is the article source: https://www.intel.com/content/www/us/en/support/articles/000025619/software.html
     
    Also you can download a detection tool that will tell you if your system is vulnerable or not: https://downloadcenter.intel.com/download/27150
     
    To my suprise, my motherboard bought about week ago has a new firmware version that is not affected. Might be same with EVGA newest Z370 boards, looking at feedback on other forums, people with Z270 boards already have to update MEI firmware, and there are also tools for that to update manually.

    Dargus Maximus
    ~Explorer ~Engineer ~Guide
    My Youtube channel - gaming, streaming, PC modding
    #6
    ssj92
    FTW Member
    • Total Posts : 1417
    • Reward points : 0
    • Joined: 2008/09/18 20:56:56
    • Location: East Bay, California
    • Status: offline
    • Ribbons : 6
    Re: Intel Chip Flaws Leave Millions of Devices Exposed..... 2017/11/22 13:22:00 (permalink)
    I think it only affects newer chipsets
     


    Alienware Area-51M Laptop: Intel Core i9-9900K @ 5.3Ghz | nVidia GeForce RTX 2080
    Alienware Aurora R4 Desktop: Intel Core i9 10980XE | nVidia Titan V
    Alienware M18xR2 Laptop: Intel Core i7 3920XM @ 4.7Ghz | nVidia Quadro RTX 3000
    Alienware X14 Laptop: Intel Core i7 12700H | nVidia GeForce RTX 3060

    #7
    KeksimusMaximus
    New Member
    • Total Posts : 87
    • Reward points : 0
    • Joined: 2017/08/18 11:29:38
    • Status: offline
    • Ribbons : 3
    Re: Intel Chip Flaws Leave Millions of Devices Exposed..... 2017/11/22 13:29:51 (permalink)
    ssj92
    I think it only affects newer chipsets
     



    Intel ME Firmware versions 11.0.0 through 11.7.0, SPS Firmware version 4.0, and TXE version 3.0 are impacted. So old not updated firmwares are safe and most recent (one month old motherboard):
     


    Dargus Maximus
    ~Explorer ~Engineer ~Guide
    My Youtube channel - gaming, streaming, PC modding
    #8
    wmmills
    CLASSIFIED ULTRA Member
    • Total Posts : 5679
    • Reward points : 0
    • Joined: 2006/01/04 20:47:29
    • Location: New Jersey
    • Status: offline
    • Ribbons : 40
    Re: Intel Chip Flaws Leave Millions of Devices Exposed..... 2017/11/23 02:46:22 (permalink)
    Whats funny is this just came out this week too: https://www.extremetech.com/computing/259350-key-windows-10-antimalware-technology-critically-broken  So now we have two pretty significant flaws coming out that can even be worked together to def do some damage. Win 7 is not affected though, just 8, 8.1 and 10, but that's still a lot of the computing environment out there.
     
    ” Enabling ASLR without simultaneously enabling bottom-up ASLR means that memory values are stored in exactly the same location each and every time. Here’s how CERT describes the problem:
    Although Windows Defender Exploit guard does have a system-wide option for system-wide bottom-up-ASLR, the default GUI value of “On by default” does not reflect the underlying registry value (unset). This causes programs without /DYNAMICBASE to get relocated, but without any entropy. The result of this is that such programs will be relocated, but to the same address every time across reboots and even across different systems. Windows 8 and newer systems that have system-wide ASLR enabled via EMET or Windows Defender Exploit Guard will have non-DYNAMICBASE applications relocated to a predictable location, thus voiding any benefit of mandatory ASLR. This can make exploitation of some classes of vulnerabilities easier. " 
     

    MOBO: EVGA x299 Dark, CPU: I9 10900X, RAM: Patriot Viper RGB 3600 32gb, SSD: Samsung 860 EVO 1TB, M2: Samsung 970 EVO+ 1TB, PSU: CoolerMaster M2 1500, CPU HSF: EVGA 240 CLC HSF~ P/P EK Furious Vardar, G-CARD:EVGA RTX3090 FTW3 Ultra Gaming w/Hybrid kit and Noctua IPPC 3000 P/P, CASE: LIAN-LI PC-V2010B w/ Window mod, OS: Windows 10 Pro 64bit, MON: Alienware AW3821DW

     New EVGA product? Register it NOW with this link:
    http://www.evga.com/register/default.asp?affiliatecode=4QFQRAMOII
     Help Our Vets From K-2!
    [link=https://strongholdfreedom
    #9
    quadlatte
    CLASSIFIED ULTRA Member
    • Total Posts : 7191
    • Reward points : 0
    • Joined: 2006/09/14 16:52:58
    • Location: Greensboro, NC
    • Status: offline
    • Ribbons : 56
    Re: Intel Chip Flaws Leave Millions of Devices Exposed..... 2017/11/25 19:49:38 (permalink)
    EVGATech_LeeM
    For what it's worth, we are aware of these reports and our engineering teams are checking with Intel to see what needs to be done, if anything.  Keep in mind that the vulnerability may not necessarily affect the type (i.e. market segment) of motherboards that EVGA sells.  As noted, however, we're looking into this and will provide updates when we can.


    good because my scan came back as bad

                                   
                                                 Heatware: http://heatware.com/eval.php?id=72498
    #10
    fearpoint
    CLASSIFIED Member
    • Total Posts : 3184
    • Reward points : 0
    • Joined: 2006/12/16 21:53:57
    • Status: offline
    • Ribbons : 3
    Re: Intel Chip Flaws Leave Millions of Devices Exposed..... 2017/11/25 20:50:43 (permalink)
    4790k master race is not affected!
     

    #11
    Bobmitch
    Omnipotent Enthusiast
    • Total Posts : 8328
    • Reward points : 0
    • Joined: 2007/05/07 09:36:29
    • Status: offline
    • Ribbons : 47
    Re: Intel Chip Flaws Leave Millions of Devices Exposed..... 2017/11/26 07:48:45 (permalink)
    According to the tool...my system is vulnerable.  X299 FTW K with i7 7820x
    post edited by bobmitch - 2017/11/26 08:04:31

    MSI MAG X670-E Tomahawk;  Ryzen 7 7800X3D; Asus TUF RTX 4070 TI OC; Seasonic Vertex GX-1000 PSU; 32 GB  Corsair Vengeance DDR5-6000 RGB; Corsair iCue Link H150i RGB 360MM AIO; 2-Western Digital Black 4 TB SN850X NVMe; Creative SoundBlaster Z;  Lian Li Lancool III; EVGA Z15 Keyboard; Razer Viper 8K Mouse


    Heatware:  http://www.heatware.com/eval.php?id=72402    Affiliate code: 1L2RV0BNQ6                                          
    Associate Code:  UD82LJP3Y1FIQPR
     


    #12
    wmmills
    CLASSIFIED ULTRA Member
    • Total Posts : 5679
    • Reward points : 0
    • Joined: 2006/01/04 20:47:29
    • Location: New Jersey
    • Status: offline
    • Ribbons : 40
    Re: Intel Chip Flaws Leave Millions of Devices Exposed..... 2017/11/26 11:24:43 (permalink)
    Tool said my rig in sig is good.

    MOBO: EVGA x299 Dark, CPU: I9 10900X, RAM: Patriot Viper RGB 3600 32gb, SSD: Samsung 860 EVO 1TB, M2: Samsung 970 EVO+ 1TB, PSU: CoolerMaster M2 1500, CPU HSF: EVGA 240 CLC HSF~ P/P EK Furious Vardar, G-CARD:EVGA RTX3090 FTW3 Ultra Gaming w/Hybrid kit and Noctua IPPC 3000 P/P, CASE: LIAN-LI PC-V2010B w/ Window mod, OS: Windows 10 Pro 64bit, MON: Alienware AW3821DW

     New EVGA product? Register it NOW with this link:
    http://www.evga.com/register/default.asp?affiliatecode=4QFQRAMOII
     Help Our Vets From K-2!
    [link=https://strongholdfreedom
    #13
    Jump to:
  • Back to Mobile