Windows 10: Intel Active Management Technology Security Review Cumulative Update

Brink · Jul 11, 2018

Intel ID: INTEL-SA-00112 Product family: Intel® Active Management Technology Impact of vulnerability: Elevation of Privilege Severity rating: Important Original release: 07/10/2018 Last revised: 07/10/2018
Summary:
In an effort to continuously improve the robustness of the Intel® Converged Security Management Engine (Intel® CSME), Intel has performed a security review of its Intel® CSME with the objective of continuously enhancing firmware resilience.

Description:
In an effort to continuously improve the robustness of the Intel® Converged Security Management Engine (Intel® CSME), Intel has performed a security review of its Intel® CSME with the objective of continuously enhancing firmware resilience.

As a result, Intel has identified security vulnerabilities that could potentially place affected platforms at risk.

Intel® Active Management Technology 3.x/4.x/5.x/6.x/7.x/8.x/9.x/10.x/11.x used in corporate PCs (Intel® vProTM, Intel® AMT), IOT devices, workstations and servers may be affected by these issues.

Affected products:
The issues affect Intel® Active Management Technology 3.x/4.x/5.x/6.x/7.x/8.x/9.x/10.x/11.x used in corporate PCs (Intel® vProTM, Intel® AMT), IOT devices, workstations and servers. These firmware versions may be found on certain products:
• Intel® Core™ 2 Duo vPro™ and Intel® Centrino™ 2 vPro™
• 1st, 2nd, 3rd, 4th, 5th, 6th, 7th, & 8th Generation Intel® Core™ Processor Family
• Intel® Xeon® Processor E3-1200 v5 & v6 Product Family (Greenlow)
• Intel® Xeon® Processor Scalable Family (Purley)
• Intel® Xeon® Processor W Family (Basin Falls)
CVE ID CVE Title CVSSv3 severity CVSSv3 Vectors CVE-2018-3628 Buffer overflow in HTTP handler in Intel® Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x,4.x,5.x,6.x,7.x,8.x,9.x, 10.x,11.x may allow an attacker to execute arbitrary code via the same subnet 8.1 (High) CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2018-3629 Buffer overflow in event handler in Intel® Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x,4.x,5.x,6.x,7.x,8.x,9.x, 10.x,11.x may allow an attacker to cause a denial of service via the same subnet 7.5 (High) CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2018-3632 Memory corruption in Intel® Active Management Technology in Intel Converged Security Manageability Engine Firmware 6.x/7.x/8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 could be triggered by an attacker with local administrator permission on system 6.4 (Medium) CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Recommendations:
Intel recommends that end users check with their system manufacturers and apply any available updates as soon as practical, based on the versions listed below, or higher:

Associated CPU Generation Resolved Firmware versions or higher 4th Generation Intel® Core™ Processor Family Intel® CSME 9.1.43
Intel® CSME 9.5.63 5th Generation Intel® Core™ Processor Family Intel® CSME 10.0.57 6th Generation Intel® Core™ Processor Family Intel® CSME 11.8.50 7th Generation Intel® Core™ Processor Family Intel® CSME 11.8.50 8th Generation Intel® Core™ Processor Family Intel® CSME 11.8.50 Intel® Xeon® Processor E3-1200 v5 & v6 Product Family Intel® CSME 11.8.50 Intel® Xeon® Processor Scalable Family Intel® CSME 11.21.51 Intel® Xeon® Processor W Family Intel® CSME 11.11.50
- The Intel® CSME firmware for the following products is no longer supported. These products will not receive a firmware update: Intel® Core™ 2 Duo vPro™, Intel® Centrino™ 2 vPro™, 1st Generation Intel® Core™, 2nd Generation Intel® Core™, 3rd Generation Intel® Core™.

Acknowledgements:
CVE-2018-3628, CVE-2018-3629 and CVE-2018-3632 were discovered by Intel as part of continuously improving the robustness of the Intel® Converged Security Management Engine (Intel® CSME).

Revision History

Revision Date Description 1.0 07/10/2018 Initial Release
CVE Name: CVE-2018-3628, CVE-2018-3629, CVE-2018-3632
Click to expand...

Source: INTEL-SA-00112

:)

T-G. · Jul 11, 2018

Windows 10 and Intel(R) Rapid Storage Technology Version 12.9.0.1001

There are updated dedicated Intel drivers available for Rapid Storage Technology (formerly Matrix Storage Manager).

Your Intel RST software version is 12.9.0.1001 and is not listed as compatible for W10 - the current version is 14.8.0.1042 and is certified as W10 compatible.

You can check for Intel drivers automatically at Drivers & Software it can scan your machine and suggest drivers for download, although Intel RST requires a
manual installation the first time on a fresh OS.

This universal file (32 & 64 bit) will also install the management console.

SetupRST.zip available here:

Download Intel® Rapid Storage Technology (Intel® RST) User Interface and Driver

Intel® Rapid Storage Technology (Intel® RST) RAID Driver

Version: 14.8.0.1042 (Latest)Date: 12/14/2015

Santosh_Rai · Jul 11, 2018

Intel Rapid Storage Technology

Hi Steve,

Thanks for posting your query on Microsoft Community.

This issue might occur when the drivers are not updated properly.

I suggest to download the latest Intel Rapid Storage Technology driver from manufacturer’s website and install it.

Refer to the below link:

Download Intel® Rapid Storage Technology (RAID) for Intel® NUC Kit D34010WY, D54250WY

Hope it helps, reply to us with the status of your issue. We will be happy to assist you.

smileye · Jul 11, 2018

Intel: ( Security Assist / Technology Access )

Wonder what all this Intel software is about
Is it coming down from the latest 10 build in updates?

I now have 4 Intel programs on my machine:
Ethernet Adapter and Intel MEI
Plus the 2 in the OP
Is Intel and Microsoft teaming up to deliver higher performance
Or similar innocent explanation *Confused

bump.. very simple
they're all installed together
as part of Intel Management Engine

Windows 10: Intel Active Management Technology Security Review Cumulative Update

Intel Active Management Technology Security Review Cumulative Update

Intel Active Management Technology Security Review Cumulative Update

Intel Active Management Technology Security Review Cumulative Update

Intel Active Management Technology Security Review Cumulative Update - Similar Threads - Intel Active Management

Suspicious Security Log activity - requesting review

Suspicious Security Log activity - requesting review

Intel Active Management Technology COM 3; COM 9

Intel Active Management Technology COM 3; COM 9

Disable Intel Active Management Technology Profile Synchronization

Windows Automatic Updates Manager review

Windows Monthly Cumulative Security Updates & Intel Micro Code updates

Intel: ( Security Assist / Technology Access )

RSA 2018 - Intel Announces Silicon-Level Security Technologies