https://community.intel.com/t5/Intel-vPro-Platform/Intel-AMT-Firmware-drivers-vulnerability-issue/m-p/453229#M5689 <P>Hello guys,</P><P>I want to confirm if a machine has the Firmware driver that is considered vulnerable (<B>X.X.XX.1XXX</B>) and a MEI (Intel Management Engine Components Driver) driver installed,</P><P>is it still considered vulnerable to the local security issue and does step 2 from the mitigation guide(disabling/removing the LMS service) still needs to be followed?</P><P>Also is the Intel management and security application local management service (LMS) installed with the MEI drivers? And if removed would the MEI drivers need to be reinstalled?</P><P>Thank you.</P> Wed, 10 May 2017 08:12:25 GMT idata 2017-05-10T08:12:25Z https://community.intel.com/t5/Intel-vPro-Platform/Intel-AMT-Firmware-drivers-vulnerability-issue/m-p/453229#M5689 <P>Hello guys,</P><P>I want to confirm if a machine has the Firmware driver that is considered vulnerable (<B>X.X.XX.1XXX</B>) and a MEI (Intel Management Engine Components Driver) driver installed,</P><P>is it still considered vulnerable to the local security issue and does step 2 from the mitigation guide(disabling/removing the LMS service) still needs to be followed?</P><P>Also is the Intel management and security application local management service (LMS) installed with the MEI drivers? And if removed would the MEI drivers need to be reinstalled?</P><P>Thank you.</P> Wed, 10 May 2017 08:12:25 GMT https://community.intel.com/t5/Intel-vPro-Platform/Intel-AMT-Firmware-drivers-vulnerability-issue/m-p/453229#M5689 idata 2017-05-10T08:12:25Z https://community.intel.com/t5/Intel-vPro-Platform/Intel-AMT-Firmware-drivers-vulnerability-issue/m-p/453230#M5690 <P>MartinKaldramov</P><P></P><P>Thank you for your query. For more details on the security vulnerability, you can refer to the security advisory here:</P><P><A href="https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&amp;languageid=en-fr">https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&amp;languageid=en-fr</A> <A href="https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&amp;languageid=en-fr">https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&amp;languageid=en-fr</A></P><P> </P><P>Breaking down your questions:</P><P>I want to confirm if a machine has the Firmware driver that is considered vulnerable (<B>X.X.XX.1XXX</B>) and a MEI (Intel Management Engine Components Driver) driver installed,</P><P>is it still considered vulnerable to the local security issue?</P><P> </P><P>Take the following steps to mitigate the risk of your systems being compromised:</P><P>1. Unprovisioned your system using the /full flag through ACUConfig.exe</P><P>2. Patched your system with the updated firmware fix</P><P> </P><P>and does step 2 from the mitigation guide(disabling/removing the LMS service) still needs to be followed?</P><P>All the steps need to be followed in the mitigation guide.</P><P> </P><P>Also is the Intel management and security application local management service (LMS) installed with the MEI drivers?</P><P>Yes</P><P> </P><P>And if removed would the MEI drivers need to be reinstalled?</P><P>Yes</P> Wed, 17 May 2017 22:23:48 GMT https://community.intel.com/t5/Intel-vPro-Platform/Intel-AMT-Firmware-drivers-vulnerability-issue/m-p/453230#M5690 MichaelA_Intel 2017-05-17T22:23:48Z