OpenSSL vulnerability in icls driver version 1.71.99.0

[MaximvL]

According to Microsoft Defender, the icls driver installed on 80% of our devices uses OpenSSL version 3.0.12. This version has known vulnerabilities.

The driverversion is 1.71.99.0 which is the latest from Windows Update and also the lastest I can find on the Intel-site (https://www.intel.com/content/www/us/en/download/682431/intel-management-engine-drivers-for-windows-10-and-windows-11.html?wapkw=intel%20r%20icss%20client).

Is there  a newer version which I missed? If not, when can we expect an updated driverpackage?

[ACarmona_Intel]

Hello MaximvL,

Thank you for posting in our communities. 

I will raise the case with our engineers so they can provide us with the correct information.

I'll post the response to this thread here once it is available.

Thank you for your patience and understanding! 

Best regards, 

Carmona A.

Intel Customer Support Technician

[ACarmona_Intel]

Hello MaximvL,

Thank you so much for patiently waiting on our response.

In order to delve deeper into this issue, we would like to ask about the specific make and model of your system, as well as your processor model.

Additionally, if you wish to report any security vulnerabilities related to Intel® products, we encourage you to check out our article titled 'How Do I Report Security and Vulnerability Issues Related to Intel® Products?' for detailed guidance.

We look forward to your response!

Best regards,

Carmona A.

Intel Customer Support Technician