topic Re: CSME Detection and Validation Tool reporting vulnerability in Intel vPro® Platform

CSME Detection and Validation Tool reporting vulnerability

SJack2 — Wed, 09 Sep 2020 13:00:19 GMT

Sorry if this is posted in the wrong section, tried navigating and ended up searching for other CSME related posts.

Anyway, read SA-00404 and updated ME firmware to required level and the latest tool still reports a vulnerability. Either the security note is erroneous or the tool is not working correctly?

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00404.html

Screenshot

Many thanks

Re: CSME Detection and Validation Tool reporting vulnerability

KenF_Intel — Wed, 09 Sep 2020 16:50:46 GMT

Hi SJack2,

Thanks for the report.

I'll check this with the tool developers and get back to you as soon as possible.

Ken

Intel Customer Support

Re: CSME Detection and Validation Tool reporting vulnerability

KenF_Intel — Wed, 09 Sep 2020 18:36:08 GMT

Hi SJack2,

The version of the tool that you downloaded, version 4.0.1.0, was posted by mistake.

The correct current version, version 3.1.0.0 has been posted and should be used to verify you have the most current AMT firmware.

Version 3.1.0.0 is available at https://downloadcenter.intel.com/download/28632/Intel-Converged-Security-and-Management-Engine-Intel-CSME-Detection-Tool?v=t

Thanks for reporting the problem.

Sorry for the confusion.

Ken

Intel Customer Support

Re: CSME Detection and Validation Tool reporting vulnerability

SJack2 — Wed, 09 Sep 2020 18:50:34 GMT

@KenF_Intel thank you