BIOS updates concerning the Meltdown / Spectre vulnerability for MEDION Desktop Mainboards

[#1]

BIOS updates concerning the Meltdown / Spectre vulnerability for MEDION Desktop Mainboards

MEDION Desktop Mainboards (Update: 29.06.2018)
  • Security hole "Spectre 1, Bounds Check Bypass (CVE-2017-5753)" fixed by KB4056568
  • Security hole "Spectre 2, Branch Target Injection (CVE 2017-5715)" see Table below
  • Security hole "Meltdown, Rogue Data Cache Load (CVE-2017-5754)" fixed by KB4056568
 

ECS (Intel)
Model	Microcode update version	Based BIOS version	BIOS ready	MEDION Download	Info
B150H4-EM	000000C2	1.xx	150EMW0X.106	Download	BIOS: Released (04.05.2018)
B250H4-EM	00000084	1.xx	250H4W0X.110	Download	BIOS: Released (27.04.2018)
BSWD-CM	00000410	1.xx	BSWDW0X.111		Testing
		2.xx	BSWDW0X.203		Testing
H110H4-CM2	000000C2	1.xx	110H4W0X.111	Download	BIOS: Released (15.12.2017)
H110H4-EM	000000C2 / 00000084	1.xx (Skylake only)	110EMW0X.105	Download	BIOS: Released (04.05.2018)
		2.xx	110EMW0X.208	Download	BIOS: Released (27.04.2018)
H110H4-EM2	000000C2 / 00000084	1.xx (Skylake only)	110M2W0X.104	Download	BIOS: Released (22.03.2018)
		2.xx	110M2W0X.210	Download	BIOS: Released (27.04.2018)
H81H3-EM2	00000024	Based on 4.03	H81EM2W0X.405		Testing
H81H3-TI (AIO)	00000024	4.xx	H81TIW0X.404		Testing
PB01 (Ultra Tiny PC)	0000002E	1.xx	PB01W0X.110	Download	BIOS: Released (07.03.2018)
		2.xx	PB01W0X.205	Download	BIOS: Released (07.03.2018)
Z170H4-EA	000000C2 / 00000084	1.xx (Skylake only)	170H4W0X.119	Download	BIOS: Released (25.05.2018)
		2.xx (Skylake only)	170H4W0X.207	Download	BIOS: Released (25.05.2018)
		3.xx	170H4W0X.303	Download	BIOS: Released (25.05.2018)
Z370H4-EM	00000084	1.xx (RAID default)	370H4W0X.109	Download	BIOS: Released (18.04.2018)
		2.xx (AHCI default)	370H4W0X.205	Download	BIOS: Released (18.04.2018)
ECS (AMD)
Model	Microcode update version	Based BIOS version	BIOS ready	MEDION Download	Info
D3F3-EM (AM3+, Kaveri)	TBD	2.xx	requested
D3F3-EM2 (AM3+, Godavari)	TBD	2.xx	requested
P2A4-EM (AM4, Ryzen)	Agesa 1.0.0.6 Summit PI	2.xx	P2A4W0X.206	Download	BIOS: Released (29.06.2018)
MSI
Model	Microcode update version	Based BIOS version	BIOS ready	MEDION Download	Info
MS-7848 H81	00000024	4.xx (W08)	requested
		5.xx (W10)	requested
MS-7848 H87	00000024	3.xx (W08)	requested
		6.xx (W10)	requested
Gigabyte
Model	Microcode update version	Based BIOS version	BIOS ready	MEDION Download	Info
GA-Z170X Gaming 7	000000C2 / 00000084	1.xx (Skylake)	GZ170W0X.124	Download	BIOS: Released (07.03.2018)
		2.xx (Kabylake)	GZ170W0X.227	Download	BIOS: Released (07.03.2018)

* Notes 

requested	The BIOS is requested from our partners
Testing	BIOS available, currently tested by MEDION

---

The information in this article refers to:

• MEDION Desktop Mainboards

Review Date: 2019-07-01

[Rex]

We have stopped providing up-to-date versions

Intel has published an update on its Security Center website
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088&languageid=en-fr

---

INTEL-SA-00088: (Revision 1.6 | 22-January-2018)
Recommendations:
Updated Jan. 22
We have now identified the root cause of the reboot issue impacting Broadwell and Haswell platforms, and made good progress in developing a solution to address it. Based on this, we are updating our guidance for customers and partners:

• We recommend that OEMs, Cloud service providers, system manufacturers, software vendors and end users stop deployment of current versions on the below platforms, as they may introduce higher than expected reboots and other unpredictable system behavior.
• We also ask that our industry partners focus efforts on testing early versions of the updated solution for Broadwell and Haswell we started rolling out this weekend, so we can accelerate its release. We expect to share more details on timing later this week.
• For those concerned about system stability while we finalize the updated solutions, we are also working with our OEM partners on the option to utilize a previous version of microcode that does not display these issues, but removes the Variant 2 (Spectre) mitigations. This would be delivered via a BIOS update, and would not impact mitigations for Variant 1 (Spectre) and Variant 3 (Meltdown).

We believe it is important for OEMs and our customers to follow this guidance for all of the specified platforms listed below, as they may demonstrate higher than expected  reboots and unpredictable system behavior. 
The progress we have made in identifying a root cause for Haswell and Broadwell will help us address issues on other platforms. Please be assured we are working quickly to address these issues.
 

---

We follow Intel's recommendation and have stopped providing up-to-date versions!
 
 

---

Update: We continue to provide up-to-date versions

---

INTEL-SA-00088: (Revision 1.9 | 20-February-2018)
Recommendations:
Updated 2/20/2018
...
We have now released new production microcode updates to our OEM customers and partners for Kaby Lake, Coffee Lake, and additional Skylake-based platforms.
...
We continue to believe it is important for OEMs and our customers to follow this guidance for all of the affected platforms. As before, please be assured we are working quickly to address these issues.
...

 

---

We follow Intel's recommendation and we continue to provide up-to-date versions!