Windows 10: Intel Converged Security Management Engine (Intel CSME) 11.x issue

Brink · Jul 11, 2018

Intel ID: INTEL-SA-00118 Product family: Intel® CSME Impact of vulnerability: Elevation of Privilege Severity rating: Important Original release: 07/10/2018 Last revised: 07/10/2018
Summary:
In an effort to continuously improve the robustness of the Intel® Converged Security Management Engine (Intel® CSME), Intel has performed a security review of its Intel® CSME with the objective of continuously enhancing firmware resilience.

Description:
In an effort to continuously improve the robustness of the Intel® Converged Security Management Engine (Intel® CSME), Intel has performed a security review of its Intel® CSME with the objective of continuously enhancing firmware resilience.

As a result, Intel has identified security vulnerabilities that could potentially place affected platforms at risk.

Affected products:
The issues affects Intel® CSME 11.x used in consumer/corporate PCs, IOT devices, and workstations. The affected firmware version may be found on these products:
• 6th, 7th, & 8th Generation Intel® Core™ Processor Family
• Intel® Xeon® Processor E3-1200 v5 & v6 Product Family (Greenlow)
• Intel® Xeon® Processor W Family (Basin Falls)
CVE ID CVE Title CVSSv3 severity CVSSv3 Vectors CVE-2018-3627 Logic bug in Intel® Converged Security Management Engine 11.x may allow an attacker to execute arbitrary code via local privileged access 7.5 (High) CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Recommendations:
Intel recommends that end users check with their system manufacturers and apply any available updates as soon as practical, based on the versions listed below, or higher:

Associated CPU Generation Resolved Firmware versions or higher 6th Generation Intel® Core™ Processor Family Intel® CSME 11.8.50 7th Generation Intel® Core™ Processor Family Intel® CSME 11.8.50 8th Generation Intel® Core™ Processor Family Intel® CSME 11.8.50 Intel® Xeon® Processor E3-1200 v5 & v6 Product Family Intel® CSME 11.8.50 Intel® Xeon® Processor W Family Intel® CSME 11.11.50
Acknowledgements:
CVE-2018-3627 was discovered by Intel as part of continuously improving the robustness of the Intel® Converged Security Management Engine (Intel® CSME).

Revision History

Revision Date Description 1.0 07/10/2018 Initial Release
CVE Name: CVE-2018-3627
Click to expand...

Source: INTEL-SA-00118

:)

Brink · Jul 11, 2018

Intel Management Engine Vulnerability and Surface Devices

Microsoft is aware of the Intel Management Engine vulnerability (Intel-SA-00086). The Intel vulnerability detection tool currently lists Microsoft Surface devices as vulnerable to this security advisory.Microsoft has investigated the issue and found the following:

Remote exploit of this vulnerability requires Intel Active Management Technology (AMT). Current Surface devices do not allow remote connectivity to the ME because our devices do not run AMT.

Local exploit of this vulnerability requires Direct Connect Interface (DCI) access via USB, which is not provided on Surface devices.

Because of this, we believe exploits using this vulnerability are significantly reduced on Surface devices. We care deeply about ensuring our devices are reliable and secure and are working with Intel to generate fixes for current devices, which we expect to release in the near future.
Click to expand...

Source: Intel Management Engine Vulnerability and Surface Devices Surface

rinconmike · Jul 11, 2018

Intel Management Engine

What is Intel Management Engine Components. I have a Dell Precision Tower 7910 and Laptop Precision 7710. they have the Intel Management Engine Components installed. I am running Win 10. I am not on a corporate network.

The Intel Management Engine Components also installs Intel Security Assist.

There is no program to run for these.

GeorgeTian · Jul 11, 2018

FAULTY_HARDWARE_CORRUPTED_PAGE Intel Management Engine

Hi All,

Recently, I performed a clean install of Windows 10, and I noted the driver version for Intel Management Engine Interface (IMEI) was 11.x. My computer was not shutting down properly - the screen went blank, the hard drive stopped, but the power button was
still on. So I downgraded IMEI to 9.x. But now I am getting BSoD's with the error message FAULTY_HARDWARE_CORRUPTED_PAGE.

How could both problems be fixed?

I was thinking that a 10.x version of IMEI might solve the problem, but I couldn't find the download link.

Thanks,

George

Windows 10: Intel Converged Security Management Engine (Intel CSME) 11.x issue

Intel Converged Security Management Engine (Intel CSME) 11.x issue

Intel Converged Security Management Engine (Intel CSME) 11.x issue

Intel Converged Security Management Engine (Intel CSME) 11.x issue

Intel Converged Security Management Engine (Intel CSME) 11.x issue - Similar Threads - Intel Converged Security

intel management engine not working

Intel Management Engine Interface Driver

driver Intel Management Engine

Intel Management Engine Interface ISSUE

UPDATE INTEL ME FIRMWARE FOR CONVERGED SECURITY & MANAGEMENT ENGINE ISSUES IN INTEL...

Intel Converged Security and Management Engine Issue

Intel® Converged Security and Management Engine

Intel Management Engine

Intel Chip Set & Intel Management Engine Help