EVGA

Intel® Management Engine Critical Firmware Update (Intel-SA-00086)

Author
kram36
The Destroyer
  • Total Posts : 21477
  • Reward points : 0
  • Joined: 2009/10/27 19:00:58
  • Location: United States
  • Status: offline
  • Ribbons : 72
2017/12/03 09:44:39 (permalink)
Check to see if you system is vulnerable and needs an update.
 
https://www.intel.com/con...00025619/software.html
#1

11 Replies Related Threads

    the_Scarlet_one
    formerly Scarlet-tech
    • Total Posts : 24581
    • Reward points : 0
    • Joined: 2013/11/13 02:48:57
    • Location: East Coast
    • Status: offline
    • Ribbons : 79
    Re: Intel® Management Engine Critical Firmware Update (Intel-SA-00086) 2017/12/03 09:50:58 (permalink)
    https://forums.evga.com/Intel-Management-Engine-Vulnerability-m2733810.aspx#2737286
     
    this was posted 2 weeks ago, is it the same detection tool?
     


    Neither of my x99 systems show as vulnerable.
    post edited by the_Scarlet_one - 2017/12/03 09:57:33

    Attached Image(s)

    #2
    kram36
    The Destroyer
    • Total Posts : 21477
    • Reward points : 0
    • Joined: 2009/10/27 19:00:58
    • Location: United States
    • Status: offline
    • Ribbons : 72
    Re: Intel® Management Engine Critical Firmware Update (Intel-SA-00086) 2017/12/03 09:57:19 (permalink)
    the_Scarlet_one
    https://forums.evga.com/Intel-Management-Engine-Vulnerability-m2733810.aspx#2737286
     
    this was posted 2 weeks ago, is it the same detection tool?


    Intel's site says "Last Reviewed: 29-Nov-2017" which was 4 days ago.
    #3
    the_Scarlet_one
    formerly Scarlet-tech
    • Total Posts : 24581
    • Reward points : 0
    • Joined: 2013/11/13 02:48:57
    • Location: East Coast
    • Status: offline
    • Ribbons : 79
    Re: Intel® Management Engine Critical Firmware Update (Intel-SA-00086) 2017/12/03 10:01:21 (permalink)
    It is the same tool, so intel may have updated the page. Either way, it is good they are releasing information.
    #4
    529th
    SSC Member
    • Total Posts : 622
    • Reward points : 0
    • Joined: 2009/08/18 17:38:02
    • Status: offline
    • Ribbons : 0
    Re: Intel® Management Engine Critical Firmware Update (Intel-SA-00086) 2017/12/03 10:16:56 (permalink)
    How Vulnerable is an X58 system with a Westmere?
    #5
    the_Scarlet_one
    formerly Scarlet-tech
    • Total Posts : 24581
    • Reward points : 0
    • Joined: 2013/11/13 02:48:57
    • Location: East Coast
    • Status: offline
    • Ribbons : 79
    Re: Intel® Management Engine Critical Firmware Update (Intel-SA-00086) 2017/12/03 10:17:46 (permalink)
    Check with the program provided.
    #6
    kram36
    The Destroyer
    • Total Posts : 21477
    • Reward points : 0
    • Joined: 2009/10/27 19:00:58
    • Location: United States
    • Status: offline
    • Ribbons : 72
    Re: Intel® Management Engine Critical Firmware Update (Intel-SA-00086) 2017/12/03 10:28:16 (permalink)
    the_Scarlet_one
    It is the same tool, so intel may have updated the page. Either way, it is good they are releasing information.

    Intel updated the detection tool to a newer version, plus the page I linked gives information on what to do about it. Which is to contact your "system or motherboard manufacturer" for the fix.
    #7
    owcraftsman
    CLASSIFIED Member
    • Total Posts : 4754
    • Reward points : 0
    • Joined: 2005/04/16 16:41:02
    • Location: Cape Coral, Florida
    • Status: offline
    • Ribbons : 60
    Re: Intel® Management Engine Critical Firmware Update (Intel-SA-00086) 2017/12/03 19:36:08 (permalink)
    The tool only tells you you need an update it's up to your board mfg. to produce the bios update. I'd venture to say nearly all are affected and everyone needs to be monitoring the board mfg. for an updated bios. There may be a IME driver update to follow but it's a hardware device controlled by firmware with software agents, so firmware is required to make changes. It's always confused me why we have no control over what amounts to a mini PC within our PC. The conspiracy theorist inside me says it's a government issued kill switch but I want to believe otherwise. Anyway you look at it, it is a backdoor.

    5800X3D | ROG Crosshair VIII Hero w/EK-Q-M-Full | Trident Z Neo 4x8 3600 C16 | EVGA RTX 3090 FTW3 Ultra w/EK-QV2-ABP +150 CC/+1000 MC | LG 34GP83A-B UW-QHD/2-Asus PB278Q  | EVGA Supernova 1000 G2 | Corsair 1TB MP600 (OS) & 970 EVO 1TB M.2 (Games) | Custom Phanteks Enthoo Luxe | NexXxoS UT60 1080mm Nova | 2x D5 w/BP-2D5TOPPEX-BK | Win-10-pro 21H2  RIG PICS
    EVGA Affiliate Code GMER9XL4N
    #8
    EVGA_Lee
    Moderator
    • Total Posts : 4247
    • Reward points : 0
    • Joined: 2016/11/04 14:43:35
    • Location: Brea, CA
    • Status: offline
    • Ribbons : 14
    Re: Intel® Management Engine Critical Firmware Update (Intel-SA-00086) 2017/12/05 11:37:17 (permalink)
    As an update, we plan to roll out BIOS updates for the following motherboard/laptop chipsets over the next month to address this specific issue:
     
    In no particular order:
    • X299
      • E299 EVGA X299 Dark
      • E297 EVGA X299 FTW K
      • E295 EVGA X299 Micro ATX
    • Z370
      • E379 EVGA Z370 Classified K
      • E377 EVGA Z370 FTW
      • E375 EVGA Z370 Micro ATX
    • Z270
      • E279 EVGA Z270 Classified K
      • E277 EVGA Z270 FTW K
      • E272 EVGA Z270 Stinger
    • Z170
      • E179 EVGA Z170 Classified 4-Way
      • E178 EVGA Z170 Classified K
      • E177 EVGA Z170 FTW
      • E172 EVGA Z170 Stinger
    • Notebooks:
      • SC17 980M
      • SC17 1080 4KG
      • SC17 1070
      • SC17 1070 4KG
      • SC15 1060G
     
    Please note that by providing a BIOS update, this does not mean that you are necessarily in any imminent danger from the reported vulnerability.  However, we will encourage you to update your motherboard BIOSes when these are available.
     
    #9
    kram36
    The Destroyer
    • Total Posts : 21477
    • Reward points : 0
    • Joined: 2009/10/27 19:00:58
    • Location: United States
    • Status: offline
    • Ribbons : 72
    Re: Intel® Management Engine Critical Firmware Update (Intel-SA-00086) 2017/12/05 11:39:38 (permalink)
    Nice to see EVGA addressing this.
    #10
    ty_ger07
    Insert Custom Title Here
    • Total Posts : 21171
    • Reward points : 0
    • Joined: 2008/04/10 23:48:15
    • Location: traveler
    • Status: offline
    • Ribbons : 270
    Re: Intel® Management Engine Critical Firmware Update (Intel-SA-00086) 2017/12/05 11:55:06 (permalink)
    I don't have Intel Management Engine software installed on my Razer Blade laptop. As such, the detection tool says software version is unknown and therefore vulnerability status is unknown. What does that mean? In what way does the software affect the Intel Management Engine hardware? Is the hardware still vulnerable without the software?

    ASRock Z77 • Intel Core i7 3770K • EVGA GTX 1080 • Samsung 850 Pro • Seasonic PRIME 600W Titanium
    My EVGA Score: 1546 • Zero Associates Points • I don't shill

    #11
    Bobmitch
    Omnipotent Enthusiast
    • Total Posts : 8328
    • Reward points : 0
    • Joined: 2007/05/07 09:36:29
    • Status: offline
    • Ribbons : 47
    Re: Intel® Management Engine Critical Firmware Update (Intel-SA-00086) 2017/12/05 13:57:00 (permalink)
    EVGATech_LeeM
    As an update, we plan to roll out BIOS updates for the following motherboard/laptop chipsets over the next month to address this specific issue:
     
    In no particular order:
    • X299
      • E299 EVGA X299 Dark
      • E297 EVGA X299 FTW K
      • E295 EVGA X299 Micro ATX
    • Z370
      • E379 EVGA Z370 Classified K
      • E377 EVGA Z370 FTW
      • E375 EVGA Z370 Micro ATX
    • Z270
      • E279 EVGA Z270 Classified K
      • E277 EVGA Z270 FTW K
      • E272 EVGA Z270 Stinger
    • Z170
      • E179 EVGA Z170 Classified 4-Way
      • E178 EVGA Z170 Classified K
      • E177 EVGA Z170 FTW
      • E172 EVGA Z170 Stinger
    • Notebooks:
      • SC17 980M
      • SC17 1080 4KG
      • SC17 1070
      • SC17 1070 4KG
      • SC15 1060G
     
    Please note that by providing a BIOS update, this does not mean that you are necessarily in any imminent danger from the reported vulnerability.  However, we will encourage you to update your motherboard BIOSes when these are available.
     




    Very much appreciated...
     
     

    MSI MAG X670-E Tomahawk;  Ryzen 7 7800X3D; Asus TUF RTX 4070 TI OC; Seasonic Vertex GX-1000 PSU; 32 GB  Corsair Vengeance DDR5-6000 RGB; Corsair iCue Link H150i RGB 360MM AIO; 2-Western Digital Black 4 TB SN850X NVMe; Creative SoundBlaster Z;  Lian Li Lancool III; EVGA Z15 Keyboard; Razer Viper 8K Mouse


    Heatware:  http://www.heatware.com/eval.php?id=72402    Affiliate code: 1L2RV0BNQ6                                          
    Associate Code:  UD82LJP3Y1FIQPR
     


    #12
    Jump to:
  • Back to Mobile