IME driver version for correct Opensll vulnerability fix dll files.

[Ashoka]

As per the blogs we have updated the Management Engine Drivers for Windows 10* and Windows 11 with latest(1.76.95.0) available versions.

https://community.intel.com/t5/Mobile-and-Desktop-Processors/Intel-Management-Engine-Iclsclient-libcrypto-libssl/m-p/1657692

downloaded latest IME driver and installed below driver…

Downloaded IME driver version – Intel_R_ME_SW_2514.7.16.0

Driver> ICLS > Iclsclient.inf  -- Driver file has version of 1.76.95.0

After upgrade , Which has 3.0.14 version Which has 3.0.14 version of libssl-3-x64.dll, libcrypto-3-x64.dll files. Still they showing as vulnerable.

3.0.15 version dll files have fix with latest IME driver, but we don't have correct download link.

 anyone facing same issue related Openssl vulnerability in defender. pls let me know if we have any solution

Thank you

[vij1]

Hello Ashoka,

Thank you for posting in Intel Communities.

Please update the ME drivers by following these steps:

1. Download the ME drivers from the link below:
2. Intel Management Engine Drivers for Windows 10 and Windows 11
3. After downloading, locate the file:
4. Intel_R_ME_SW_2514.7.16.0 (3).zip\Intel_R_ME_SW_2514.7.16.0\Installers\Legacy
5. Unzip the files.
6. Run the installer as Administrator and update the ME drivers to the latest version.

https://www.intel.com/content/www/us/en/download/682431/intel-management-engine-drivers-for-windows-10-and-windows-11.html

Best regards,

Vijay N.

Intel Customer Support Technician

intel.com/vPro

[Ashoka]

HI Vijay,

Thanks for the update.

I have done the same process already. Downloaded and installed driver from above location.

It installs libcrypto-3-x64.dll and libssl-3-x64.dll files with version 3.4.1.0.

also made sure that no older driver files exist in the device, but still, we can see that device shows OpenSSL vulnerability for above files.

any alternate solution pls.

Thanks,

Regards,

Ashok

[vij1]

Hello Ashoka,

Thank you for the detailed information you provided and for the steps you have already taken to update the Intel® Management Engine (Intel® ME) driver.

To help validate the current Intel® ME firmware and driver status on your system, we recommend using the Intel® Converged Security and Management Engine Version Detection Tool (Intel® CSMEVDT).

This tool scans your system and identifies any known Intel® ME–related vulnerabilities.

You can download it here:

Intel® CSMEVDT

https://www.intel.com/content/www/us/en/download/736748/intel-converged-security-and-management-engine-version-detection-tool-intel-csmevdt.html

Please note that Intel® ME issues often require updates to both the system BIOS and the Intel® ME driver.

If the OpenSSL vulnerability persists after installing the latest driver, we recommend checking with your system manufacturer (OEM) for the most recent BIOS update that may include updated Intel® ME firmware.

For further reference, Intel publishes all security advisories at the following page:

Intel Security Advisories:

https://www.intel.com/security

If you need to report a potential security concern directly to Intel, you may review the following guidance:

Reporting a Security Vulnerability:

https://www.intel.com/content/www/us/en/security-center/vulnerability-handling-guidelines.html

Regarding OpenSSL, please keep in mind that it is an open‑source component, and updates or fixes may vary depending on how OEMs package their drivers. You may also refer to the OpenSSL community for additional information:

https://www.openssl.org/

Since Intel provides driver updates to OEMs, and OEMs may customize these packages for their systems, we strongly recommend contacting your PC manufacturer for the most suitable driver and BIOS updates.

Best regards,

Vijay N.

Intel Customer Support Technician

intel.com/vPro

[vij1]

Hello Ashoka,

I hope you're doing well.

If further assistance is necessary, do not hesitate to reply.

Best regards,

Vijay N.

Intel Customer Support Technician

intel.com/vPro

[vij1]

Hello Ashoka,

I hope you're doing well.

If further assistance is necessary, do not hesitate to reply.

Best regards,

Vijay N.

Intel Customer Support Technician

intel.com/vPro

[Ashoka]

HI Vijay,

Vulnerability issue still exists . we tried with latest IME driver update and it updated the Lybcrypto_64.dll version to 3.4.1.0.

We also updated the device BIOS to latest version.

But still we can see it is marked as vulnerable version in defender portal.

Please let us know if any new version have the fix and any other method to fix the vulnerability..

Thanks for your support..

Regards,

Ashok