[FIRMWARE] Intel ME (Z490)

[geneo]

I am running firmware 14.1.51.1528, which is very recent, yet the latest (December) CSME version detection tool says I *may* be vulnerable. I assume this is just the tool not knowing about this update. Will do your latest anyhow in a bit.

Thanks in advance.

[geneo]

Update went smooth. Will run some tests. Thanks again.

It looks like the CSME version detection tool needs updating!

[Sylencer90]

I updated it, not really sure if it was necessary to update but it went smooth. Currently i grab every bit i can to get my scuffed windows performance back how it used to be in november before they botched it.

[moe_lvr_666]

Update went smooth. Will run some tests. Thanks again.

It looks like the CSME version detection tool needs updating!

I'm getting the same message Detection Error...
Z490 Maximus XII Hero
I9 10900k
Rog Strix 3090

[MoKiChU]

I am running firmware 14.1.51.1528, which is very recent, yet the latest (December) CSME version detection tool says I *may* be vulnerable. I assume this is just the tool not knowing about this update. Will do your latest anyhow in a bit.

Thanks in advance.

Update went smooth. Will run some tests. Thanks again.

It looks like the CSME version detection tool needs updating!

I'm getting the same message Detection Error...
Z490 Maximus XII Hero
I9 10900k
Rog Strix 3090

Hi,

It's just that the version 4.1.0.0 of the CSME Version Detection Tool is older than the firmware 14.1.xx.xxxx branch and it doesn't recognize it, hence this Detection Error message.

As long as you don't see the This system is vulnerable message, you're fine.

[geneo]

Hi,

It's just that the version 4.1.0.0 of the CSME Version Detection Tool is older than the firmware 14.1.xx.xxxx branch and it doesn't recognize it, hence this Detection Error message.

As long as you don't see the This system is vulnerable message, you're fine.

The statement "This system may be vulnerable" is of course, always true (especially with the ongoing slew of vulnerabilities being uncovered).

I think that it is unlikely these will be exploited in the consumer space, more likely commercial, but I am not going to bank on it (pun intended).

[moe_lvr_666]

Hi,

It's just that the version 4.1.0.0 of the CSME Version Detection Tool is older than the firmware 14.1.xx.xxxx branch and it doesn't recognize it, hence this Detection Error message.

As long as you don't see the This system is vulnerable message, you're fine.

MoKiChU, thank you very much sir! I'll email Intel about CSME Detection tool is outdated.
Great Job!

[MoKiChU]

The statement "This system may be vulnerable" is of course, always true (especially with the ongoing slew of vulnerabilities being uncovered).

I think that it is unlikely these will be exploited in the consumer space, more likely commercial, but I am not going to bank on it (pun intended).

MoKiChU, thank you very much sir! I'll email Intel about CSME Detection tool is outdated.
Great Job!

Hi,

The Intel detection tool does only detect according to the vulnerability data with which it was programmed.

If you are in doubt, and don't want to wait for the next Intel detection tool with updated vulnerability data, you can see that the latest vulnerability data (updated 22/01/2021) indicates that the branch Intel ME 14.1.xx.xxxx is not vulnerable at all to the latest vulnerabilities :

INTEL-SA-00391 (Source) : https://www.intel.com/content/www/us...-sa-00391.html

[geneo]

Hi,

The Intel detection tool does only detect according to the vulnerability data with which it was programmed.

If you are in doubt, and don't want to wait for the next Intel detection tool with updated vulnerability data, you can see that the latest vulnerability data (updated 22/01/2021) indicates that the branch Intel ME 14.1.xx.xxxx is not vulnerable at all to the latest vulnerabilities :

INTEL-SA-00391 (Source) : https://www.intel.com/content/www/us...-sa-00391.html

I am aware of all of that. It was in jest.

[moe_lvr_666]

Hi,

The Intel detection tool does only detect according to the vulnerability data with which it was programmed.

If you are in doubt, and don't want to wait for the next Intel detection tool with updated vulnerability data, you can see that the latest vulnerability data (updated 22/01/2021) indicates that the branch Intel ME 14.1.xx.xxxx is not vulnerable at all to the latest vulnerabilities :

INTEL-SA-00391 (Source) : https://www.intel.com/content/www/us...-sa-00391.html

Master!