abbrechen
Suchergebnisse werden angezeigt für 
Stattdessen suchen nach 
Meintest du 

C-Bild meldet: Nahezu alle aktuellen Intel-Prozessoren angreifbar

Explorer
Nachricht 71 von 73
404 Aufrufe
Nachricht 71 von 73
404 Aufrufe

Re: C-Bild meldet: Nahezu alle aktuellen Intel-Prozessoren angreifbar

INTEL-SA-00125:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00125.html


HEISE:
"Die Lücke ist als schwerwiegend eingestuft, lässt sich allerdings nur dann ausnutzen, wenn der Angreifer physischen Zugriff auf den Computer hat. Betroffen sind jüngere Systeme mit Prozessoren aus den vergangenen 3 Jahren, also ab Intel Skylake..."
https://www.heise.de/security/meldung/Bug-in-Intels-ME-Firmware-Wieder-BIOS-Updates-noetig-4165732.h...

Apprentice
Nachricht 72 von 73
361 Aufrufe
Nachricht 72 von 73
361 Aufrufe

Re: C-Bild meldet: Nahezu alle aktuellen Intel-Prozessoren angreifbar

Regular Updates for Intel® Converged Security and Management Engine (Intel® CSME)

 

Last Reviewed: 11-Sep-2018
Article ID: 000029386

 

The security of our products and our customers’ data is a top Intel priority. Product security updates are periodically delivered through a process of coordinated disclosure.

To simplify the update process and improve predictability for our customers and partners, Intel has begun issuing regular updates for the Intel® Converged Security and Management Engine (Intel® CSME). Intel CSME was previously referred to as the Intel® Management Engine or Intel® Server Platform Services. These updates bundle together current security, functional, and performance improvements. Release notes for these updates will be provided when available.

 

September 2018 update

This update includes fixes for the security vulnerabilities identified below. Intel has released firmware updates to system manufacturers that mitigate the issues. Contact your system or motherboard manufacturer to obtain the firmware updates.

You can find details for these issues here:

July 2018 update

This update includes fixes for two security vulnerabilities. Intel has released firmware updates to system manufacturers that mitigate the issues. Contact your system or motherboard manufacturer to obtain the firmware updates.

You can find details for these issues here:

 

Quelle: https://www.intel.com/content/www/us/en/support/articles/000029386/technologies.html

 

Zusätzliche Links:

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00125.html

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00131.html

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00141.html

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00142.html

Apprentice
Nachricht 73 von 73
132 Aufrufe
Nachricht 73 von 73
132 Aufrufe

Re: C-Bild meldet: Nahezu alle aktuellen Intel-Prozessoren angreifbar

Intel ME 11.8.60.3561 wird nun verteilt. Lenovo meint hierzu:

 - Fixed the following security vulnerabilities:
   CVE-2018-12188, CVE-2018-12189, CVE-2018-12190, CVE-2018-12191,
   CVE-2018-12192, CVE-2018-12199, CVE-2018-12187, CVE-2018-12196 and
   CVE-2018-12185.
 - Fixed an issue where Intel(R) ME does not work properly after performing FW
   Update.
 - Fixed an issue where firmware reset occurs when loading web storage when
   using MeshCommander.
 - Fixed an issue where wrong Intel(R) LMS version is displayed when executing
   MeInfoWin64.
 - Fixed an issue when starting user consent flow, MEBX Consent is not displayed.
 - Fixed an issue when the platform is on S3 resume flow, the HECI SW fails to
   communicate with HECI FW.

Quelle: https://pcsupport.lenovo.com/de/en/products/laptops-and-netbooks/thinkpad-x-series-laptops/thinkpad-...


https://www.win-raid.com/t832f39-Intel-Engine-Firmware-Repositories.html
https://www.win-raid.com/t596f39-Intel-Management-Engine-Drivers-Firmware-amp-System-Tools.html