Windows 10: Flaws found in Intel Management Engine (ME), TXE and SPS

Thanks, Xips! I checked yesterday and my Flex 4-1470 wasn't there. They must have updated the list whilst I was sleeping. Which is good. Now I just have to wait until tomorrow. Maybe.

 

I have a Lenovo K450 which has a Intel 4th gen processor. Intel says it's not vulnerable, Lenovo says it's not vulnerable and the tools says it's not vulnerable, so I'm A-okay.

 

Hi,
Wonder if it's as easy as uninstalling Intel management engine as a cure *Smile

 

Hi,

That alone won't make any difference with regard to this vulnerability I'm afraid.

Cheers, *Wink

 

https://security-center.intel.com/ad...nguageid=en-fr

 

There are people using pre 2010 Intel CPU for exactly that reason.

Privacy over performance.

 

I didn't know a thing on Intel ME engine til after I purchased my newer Intel I7 System, previously was on AMD based systems for years, Guess now just waits patiently for Asus to get a fix out, and then applies the fix, and should hopefully be fine

 

Look like I'll have to wait for Gigabyte to release a new BIOS for my board as I too failed the test. My 2017 Lenovo ThinkPad Yoga X1 passed though. I just updated the BIOS on that yesterday though.

Anyway it seems Gigabyte is all over the place with their drivers and BIOS updates on my Z270 board - GA-Z270X-Gaming 8 (rev. 1.0) | Motherboard - GIGABYTE

I have an issue where their latest IRST drivers (15.9.0.1015) crash my board. Also found their IME driver listed as version 11.8.50.3420, is NOT what's being downloaded. When downloading from any server I get version 11.7.0.1050. Yet when installed it shows up as version 11.7.0.1045 (dated 10/3/2017).

Their latest BIOS for my board (F7) has been around since July 2017 to "Update CPU micro code to fix HT flaw issue". Yet much later they added a second line stating the BIOS also "Update intel ME for security vulnerabilities". This second line wasn't there when I updated the BIOS in July. With that, I downloaded it again thinking the date was wrong seeing that second line but it's the same BIOS and the failed test persists. Thus I await a new BIOS.

 

OH NO!! *Sad

ASUS Z270 TUF Mark 1
=====================

 

Asus has a firmware update for your board under the Bios section.

 

Yea,..I've just seen it and downloaded it. Thing is,..I've unzipped the file and I see two .exe files. One is called MEUpdatetool.exe and the other is called PEUpdater.exe. Which one do I double click on??

Also,..On the ASUS website it says this.

Please download the file and check the MD5 code first.
MD5: 6d3df63d6fe7019f956e91aeb6bc9410"

I don't even know where to look. *Sad

 

@Runnerbean
A tool used by many here for genning and comparing hash values is Winhasher. Safe and free. Get it from github, not anywhere else. About half way down this page, DL the installer. Easy to use.

GitHub - gpfjeff/winhasher: Free cryptographic file hash generator for Windows (.NET 2.0)

 

7Zip finds checksums too:

 

Hi,
I just flashed my bios last week so it's not in the 0802 bios and not listed to address any issues with IME
Which again seems it would be a chipset driver update since that is where IME installs from.

 

I've got 7zip too so how do I check my download zip file and check the MD5 code first. I've opened the zip and I see a lot various files within. Is there somebody,..anybody that can lend a helping hand please?

ASUS have provided an update but like I said above, I'm still not even sure which one to use because there is a file called MEUpdatetool.exe and the other is called PEUpdater.exe. Which one do I double click on??

Any ASUS Mobo owners in the house!! *Cool