Forum - RE: Intel Management Engine: Drivers, Firmware & System Tools

Win-Raid Forum (Drivers - Firmware - Modding) � Special Topics � Intel Management Engine � Intel (Converged Security) Management Engine: Drivers, Firmware and Tools

Page 188 of 380 � Page 1 ... 183 184 185 186 187 188 189 190 191 192 ... 380 Page �

Topic settings

Print view

Jump to forum

General & Forum related Topics News / Announcements Forum-related Questions & Suggestions Off Topic Important Drivers (AHCI/RAID, NVMe, USB etc.) General: Storage Drivers (AHCI/RAID, NVMe and USB) Specific: Intel AHCI/RAID Drivers Specific: NVIDIA nForce Chipset Drivers (incl. AHCI/RAID) Specific: NVMe Drivers Other Drivers System Performance RAID Performance AHCI/NVMe Performance Solid State Drives BIOS Modding BIOS Modding Guides and Problems BIOS modules (PCI ROM, EFI and others) BIOS Modding Requests Reports: BIOS Modding Results Offers: Already modded special BIOSes Special Topics Intel Management Engine CPU Microcodes NVMe Support for old Systems Other Tools (not BIOS modding related) Interesting PC Hardware & Software OS related Topics Windows 11 Windows 8-10/Server 2012-2019 Windows 7/Vista/Server 2008 Windows XP/2000/Server 2003 DOS/Windows 3.X/9X/ME - Retro Gaming Other Operating Systems

#2806 | RE: Intel Management Engine: Drivers, Firmware & System Tools datum

Tue May 02, 2017 12:02 am (Last edited: Tue May 02, 2017 12:17 am)

Zitat von ms178 im Beitrag #2811
FYI, as it seems Intel provided new MEI firmware to OEMs to fix a major security hole, for more see the article at Semiaccurate

Here is the official Advisory from Intel:

https://security-center.intel.com/adviso...anguageid=en-fr

Here are the mitigation steps until the OEMs update their BIOS (oh boy...):

https://downloadcenter.intel.com/download/26754

The firmware that fix this vulnerability are the following:

6.2.61.3535
7.1.91.3272
8.1.71.3608
9.1.41.3024
9.5.61.3012
10.0.55.3000
11.0.25.3001
11.6.27.3264

Intel should have released those firmware at their own site in my own opinion instead of waiting for the OEMs to update their BIOS (which won't happen easily for older systems with ME6,7 etc). When any of these firmware are found I will update the thread as usual. This is one of the main reasons why this thread exists.

Regarding ME 11.7:

Intel hasn't acknowledged ME 11.7 at their advisory because KBL Refresh is not out yet but you can assume that the version we have currently found (11.7.0.1229 - based on 11.6.25.1229) is also affected. At least, maybe, since this vulnerability targets AMT and thus Corporate firmware which we don't have any at 11.7 yet. Nevertheless, I advise people to roll back to 11.6.25.1229 while they still can (VCN is the same between 11.6.25.1229 and 11.7.0.1229 so hopefully it's possible) and wait for Intel's 11.6.27.3264.

Edit: Lenovo didn't get the memo apparently:

reply

#2807 | RE: Intel Management Engine: Drivers, Firmware & System Tools datum

Tue May 02, 2017 12:43 am (Last edited: Tue May 02, 2017 12:47 am)

Read that SemiAccurate (what a name ^^) article just a few hours ago via HN and it basically says nothing. Also Intel says "This vulnerability does not exist on Intel-based consumer PCs"... i really dunno what to expect from all of this and i am curious about the whole situation.

Zitat von plutomaniac im Beitrag #2812
At least, maybe, since this vulnerability targets AMT and thus Corporate firmware which we don't have any at 11.7 yet.

This vulnerability targets all systems not only AMT enabled?

aka Velocet | Xeon E3-1230v3 @ ASUS Z87 Gryphon (mBIOS 3301)|
Samsung 960 Pro NVMe via kryoM.2 evo|ASUS GTX 650 Ti Boost OC

reply

#2808 | RE: Intel Management Engine: Drivers, Firmware & System Tools datum

Tue May 02, 2017 1:02 am (Last edited: Tue May 02, 2017 1:08 am)

That article was annoyingly vague and also had some mistakes (ME6 is from 2009, ME 11.x is x86 and not ARC based, AMT is only at 5MB/Corporate systems so it doesn't affect "everyone" etc). It's great that the vulnerability was found and finally solved but it seems like they are trying to scare a lot more people than they actually need to.

Generally, from what Intel says, this vulnerability is Active Management Technology (AMT), Standard Manageability (ISM) and Small Business Technology (Intel® SBT) related. That means 5MB/Corporate systems only, thus not 1.5MB/Consumer.

Intel just updated their advisory (r1.1) and added detection steps for non tech/ME savvy users:

https://security-center.intel.com/adviso...anguageid=en-fr
https://downloadcenter.intel.com/download/26755

According to a table they have, 11.7 (Corporate) "seems" to not be affected. This is the first time I've seen 11.7 being officially mentioned. Thing is, since KBL-R/11.7 is not out yet, they may mean that recent 11.7 firmware is not vulnerable, not old ones. Currently, for the 11.7 firmware offered in this thread, we know that ours is from February but also Consumer not Corporate. So according to Intel, these are ok.

reply

#2809 | RE: Intel Management Engine: Drivers, Firmware & System Tools datum

Tue May 02, 2017 1:10 am

Wonder will updating ME firmware on Kaby Lake will help lower cpu core temps on these processors? Been getting some crazy insanely high prime95 temps.

Thanks

reply

#2810 | RE: Intel Management Engine: Drivers, Firmware & System Tools datum

Tue May 02, 2017 1:14 am

No, what's most probable is that you've done something wrong (bad cpu cooler application, no/too little/too much thermal paste, non working fan, very aggressive overclock, wrong fan profiles etc). The only thing that could be ME related is a corrupted ME firmware causing power management and fan control issues but it's not common. Even if the latter is the case, updating won't help, a full repair would be needed. Usually though these are caused by user errors.

reply

#2811 | RE: Intel Management Engine: Drivers, Firmware & System Tools datum

Tue May 02, 2017 1:20 am

I read that Intel used poor quality TIM in the Kaby Lake line of CPU and thats why a lot of them run hot. Also there are two versions of Prime95 out there. One that gives abnormally high temps. FWIW I checked my mounting like three times over. Even bought a better quality heatsink. They just run hot. So I've read. Think my main board is over volting it as well. Guess thats up to the bios engineers to fix.

Thanks.

reply

#2812 | RE: Intel Management Engine: Drivers, Firmware & System Tools datum

Tue May 02, 2017 1:23 am

typing from a i5 7500 and with stock Intel cooler cannot reach 70C even after one hour on Prime95.
you have a different issue

reply

#2813 | RE: Intel Management Engine: Drivers, Firmware & System Tools datum

Tue May 02, 2017 1:28 am

They use not-so-great TIM because that one lasts for many years whereas the ones we apply between the heat spreader and the cooler last for a significantly shorter period before reapplication is necessary. But that's neither here nor there. Even with that "poor" quality TIM (it's ok really, not worth deliding for 4-5 degrees) you shouldn't be facing overheating issues. Your problem is elsewhere, not with the CPU and probably not with the ME (verify by MEInfo & MEManuf if you like but it won't help). Also, to point the obvious, Prime95 is designed to burn-in the CPU so it never represents real world use. Generally, as elisw and I said, you should look elsewhere for the cause of that issue.

reply

#2814 | RE: Intel Management Engine: Drivers, Firmware & System Tools datum

Tue May 02, 2017 1:34 am

Long story short its an HTPC case with not best thermal dynamics with a HTPC Thermalright cooler. Sorry if I went off topic. Will try updating ME though won't expect miracles. Thanks.

reply

#2815 | RE: Intel Management Engine: Drivers, Firmware & System Tools datum

Tue May 02, 2017 1:40 am (Last edited: Tue May 02, 2017 1:47 am)

Guys read the second post on this Intel support thread! Was posted on behalf of Intel Corp. Contradicts what you guys just said!

https://communities.intel.com/thread/111954

I mean Intel seems to think one should update ME drivers for sake of cpu temps right or wrong...

reply

#2816 | RE: Intel Management Engine: Drivers, Firmware & System Tools datum

Tue May 02, 2017 1:50 am (Last edited: Tue May 02, 2017 1:53 am)

here is what I measured today during Prime95 (small FFT).
MEI Driver is 11.6.0.1032
sorry for the OT|addpics|bpu-3-92e3.png|/addpics|

reply

#2817 | RE: Intel Management Engine: Drivers, Firmware & System Tools datum

Tue May 02, 2017 2:20 am

Zitat von elisw im Beitrag #2822
here is what I measured today during Prime95 (small FFT).
MEI Driver is 11.6.0.1032
sorry for the OT|addpics|bpu-3-92e3.png|/addpics|

Try that on version 28.1 of Prime95 and your temps will be at least 10 degrees higher!

reply

#2818 | RE: Intel Management Engine: Drivers, Firmware & System Tools datum

Tue May 02, 2017 2:04 pm

Zitat von plutomaniac im Beitrag #2819
They use not-so-great TIM because that one lasts for many years whereas the ones we apply between the heat spreader and the cooler last for a significantly shorter period before reapplication is necessary. But that's neither here nor there. Even with that "poor" quality TIM (it's ok really, not worth deliding for 4-5 degrees) you shouldn't be facing overheating issues. Your problem is elsewhere, not with the CPU and probably not with the ME (verify by MEInfo & MEManuf if you like but it won't help). Also, to point the obvious, Prime95 is designed to burn-in the CPU so it never represents real world use. Generally, as elisw and I said, you should look elsewhere for the cause of that issue.

To be fair, you save around 20-25*C by delidding a Kaby Lake processor. It isn't about the TIM but the gap between the IHS and the die itself because of the glue being used.

reply

#2819 | RE: Intel Management Engine: Drivers, Firmware & System Tools datum

Tue May 02, 2017 4:44 pm

In the news today.
All intel management engine firmware has a remote execution bug which allows for easy remote hacking without the user or OS ever being aware of it.

new firmwares anounced:

- First-gen Core family: 6.2.61.3535
- Second-gen Core family: 7.1.91.3272
- Third-gen Core family: 8.1.71.3608
- Fourth-gen Core family: 9.1.41.3024 and 9.5.61.3012
- Fifth-gen Core family: 10.0.55.3000
- Sixth-gen Core family: 11.0.25.3001
- Seventh-gen Core family: 11.6.27.3264

I disabled the IME network functionallity months ago when updating to the latest IME, just to prevent this kind of thing.

reply

#2820 | RE: Intel Management Engine: Drivers, Firmware & System Tools datum

Tue May 02, 2017 5:54 pm (Last edited: Tue May 02, 2017 5:59 pm)

Zitat von plutomaniac im Beitrag #2814
That article was annoyingly vague and also had some mistakes...

Interesting, I just readed both articles. I agree that the article by SemiAccurate is semi-accurate or misleading a bit :)
Intel clearly states, that the systems affected by the bug are corporate ME FW (5MB) with full AMT. So desktop MB users shoul be safe. Also because AFAIK AMT can work with intel NIC only and most of common dosktop MBs use Realtek/Marvell/Broadcom, etc. so I hope it cannot be hacked remotely via AMT even there's some TCP/IP stack inside consumer systems. More often the full AMT can bee seen on notebooks...
I also think that intel should release ME FW updates for everybody like they do microcodes updates for (not only) linux community to be able to fix older system. No much OEMs would release BIOS updates for 8 years old MBs, hehe. It's common ~2-3 years support... BTW a paranoid though rises about the new "fixed" ME FW that can contain another bug or intentional better hidden backdoor that would spread more easily because of panic around this old bug :)

reply

Repair MEI on Samsung NP550P7C-S04PL � � Strange ME Region size mismatch after reconfiguring and rebuilding

Page 188 of 380 � Page 1 ... 183 184 185 186 187 188 189 190 191 192 ... 380 Page �

Please enter a reason for warning.