Windows 10: Intel® Converged Security and Management Engine

Grom0X · Sep 24, 2018

Intel® Converged Security and Management Engine (Intel® CSME) Issue (SA-00125)

Last Reviewed: 12-Sep-2018
Article ID: 000030079
Intel was notified of an issue with the Intel® Converged Security and Management Engine (Intel® CSME) firmware. An attacker with physical access could do the following on an individual platform:

Bypass Intel® CSME anti-replay protection, thus allowing potential brute force attacks on secrets stored inside the Intel CSME;

Gain unauthorized access to the Intel® Management Engine BIOS Extension (Intel® MEBX) password;

Tamper with the integrity of the Intel® CSME file system directories or the Server Platform Services and Trusted Execution Environment (Intel® TXE) data files.

See Security Advisory INTEL-SA-00125 for further details.
Affected Products/Technologies
The issue has been identified as a vulnerability in the Intel® CSME firmware versions: 11.0 through 11.8.50; 11.10 through 11.11.50; 11.20 through 11.21.51, Intel® Server Platform Services firmware version 4.0 (on Purley and Bakerville only) and Intel® TXE version 3.0 through 3.1.50.
Systems using Intel® CSME firmware versions prior to 11.0/ Intel® Server Platform Services 4.0/TXE 3.0 or using firmware versions 11.8.55/11.11.55/11.21.55/ Intel® Server Platform Services 5.0 and higher/TXE 3.1.55 or higher don't contain the identified vulnerability.
Intel® Converged Security and Management Engine (Intel® CSME) Updated Intel® CSME Firmware version Replaces Intel® CSME Firmware version 11.8.55.3510 11.8.50.3399 11.11.55.1509 11.11.50.1402 11.21.55.1508 11.21.50.1400 Intel® Server Platform Service Updated SPS Firmware version Replaces SPS Firmware version SPS_SoC-A_04.00.04.177.0 SPS_SoC-A_04.00.04.172.0 SPS_SoC-X_04.00.04.077.0 SPS_SoC-X_04.00.04.057.0 SPS_E5_04.00.04.381.0 SPS_E5_04.00.04.340.0 Intel® Trusted Execution Engine (TXE) Updated TXE Firmware version Replaces TXE Firmware version 3.1.55 3.1.50.2222 Contact your system or motherboard manufacturer to obtain an Intel CSME firmware update or BIOS update that addresses this vulnerability. Intel can't provide updates for systems or motherboards from other manufacturers.
The Intel SA-00125 Detection tool is available in Download Center to assist customers in determining if systems are vulnerable to this issue.

Find support for related products

Active Products

Intel® Management Engine
SOURCE: https://www.intel.com/content/www/us...-software.html

:)

Brink · Sep 24, 2018

Intel Converged Security Management Engine (Intel CSME) 11.x issue

[table][tr]Intel ID: INTEL-SA-00118 [/tr] [tr][td]Product family:[/td] [td]Intel® CSME[/td] [/tr] [tr][td]Impact of vulnerability:[/td] [td]Elevation of Privilege[/td] [/tr] [tr][td]Severity rating:[/td] [td]Important[/td] [/tr] [tr][td]Original release:[/td] [td]07/10/2018[/td] [/tr] [tr][td]Last revised:[/td] [td]07/10/2018[/td] [/tr] [/table]

Summary:
In an effort to continuously improve the robustness of the Intel® Converged Security Management Engine (Intel® CSME), Intel has performed a security review of its Intel® CSME with the objective of continuously enhancing firmware resilience.

Description:
In an effort to continuously improve the robustness of the Intel® Converged Security Management Engine (Intel® CSME), Intel has performed a security review of its Intel® CSME with the objective of continuously enhancing firmware resilience.

As a result, Intel has identified security vulnerabilities that could potentially place affected platforms at risk.

Affected products:
The issues affects Intel® CSME 11.x used in consumer/corporate PCs, IOT devices, and workstations. The affected firmware version may be found on these products:
• 6th, 7th, & 8th Generation Intel® Core™ Processor Family
• Intel® Xeon® Processor E3-1200 v5 & v6 Product Family (Greenlow)
• Intel® Xeon® Processor W Family (Basin Falls)
[table][tr][td]CVE ID[/td] [td]CVE Title[/td] [td]CVSSv3 severity[/td] [td]CVSSv3 Vectors[/td] [/tr] [tr][td]CVE-2018-3627[/td] [td]Logic bug in Intel® Converged Security Management Engine 11.x may allow an attacker to execute arbitrary code via local privileged access[/td] [td]7.5 (High)[/td] [td]CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H[/td] [/tr] [/table]

Recommendations:
Intel recommends that end users check with their system manufacturers and apply any available updates as soon as practical, based on the versions listed below, or higher:

[table][tr][td]Associated CPU Generation[/td] [td]Resolved Firmware versions or higher[/td] [/tr] [tr][td]6th Generation Intel® Core™ Processor Family[/td] [td]Intel® CSME 11.8.50[/td] [/tr] [tr][td]7th Generation Intel® Core™ Processor Family[/td] [td]Intel® CSME 11.8.50[/td] [/tr] [tr][td]8th Generation Intel® Core™ Processor Family[/td] [td]Intel® CSME 11.8.50[/td] [/tr] [tr][td]Intel® Xeon® Processor E3-1200 v5 & v6 Product Family[/td] [td]Intel® CSME 11.8.50[/td] [/tr] [tr][td]Intel® Xeon® Processor W Family[/td] [td]Intel® CSME 11.11.50[/td] [/tr] [/table]

Acknowledgements:
CVE-2018-3627 was discovered by Intel as part of continuously improving the robustness of the Intel® Converged Security Management Engine (Intel® CSME).

Revision History

[table][tr]Revision Date Description [/tr] [tr][td]1.0[/td] [td]07/10/2018[/td] [td]Initial Release[/td] [/tr] [/table]

CVE Name: CVE-2018-3627
Click to expand...

Source: INTEL-SA-00118

Brink · Sep 24, 2018

Intel Management Engine Vulnerability and Surface Devices

Microsoft is aware of the Intel Management Engine vulnerability (Intel-SA-00086). The Intel vulnerability detection tool currently lists Microsoft Surface devices as vulnerable to this security advisory.Microsoft has investigated the issue and found the following:

Remote exploit of this vulnerability requires Intel Active Management Technology (AMT). Current Surface devices do not allow remote connectivity to the ME because our devices do not run AMT.

Local exploit of this vulnerability requires Direct Connect Interface (DCI) access via USB, which is not provided on Surface devices.

Because of this, we believe exploits using this vulnerability are significantly reduced on Surface devices. We care deeply about ensuring our devices are reliable and secure and are working with Intel to generate fixes for current devices, which we expect to release in the near future.
Click to expand...

Source: Intel Management Engine Vulnerability and Surface Devices Surface

rinconmike · Sep 24, 2018

Intel Management Engine

What is Intel Management Engine Components. I have a Dell Precision Tower 7910 and Laptop Precision 7710. they have the Intel Management Engine Components installed. I am running Win 10. I am not on a corporate network.

The Intel Management Engine Components also installs Intel Security Assist.

There is no program to run for these.

Windows 10: Intel® Converged Security and Management Engine

Intel® Converged Security and Management Engine

Intel® Converged Security and Management Engine

Intel® Converged Security and Management Engine

Intel® Converged Security and Management Engine - Similar Threads - Intel® Converged Security

Uninstall Intel Management Engine Components

intel management engine not working

Intel Management Engine Interface Driver

driver Intel Management Engine

How to uninstall Intel Management Engine

UPDATE INTEL ME FIRMWARE FOR CONVERGED SECURITY & MANAGEMENT ENGINE ISSUES IN INTEL...

Intel Converged Security and Management Engine Issue

Intel Converged Security Management Engine (Intel CSME) 11.x issue

Intel Management Engine

Users found this page by searching for:

Intel® Converged Security and Management Engine benefit