Intel recently issued a security advisory regarding a critical flaw that has been affecting its processors for almost a decade. The vulnerability resides in the Active Management Technology, Intel Small Business Technology, and Intel Standard Manageability firmware versions 6.x, 7.x, 8.x 9.x, 10.x, 11.0, 11.5, and 11.6.
This feature is mostly used for computers running vPro processors bought by business customers to administer large fleets of computers thus becoming a matter of concern for them. According to the advisory, this escalation of privilege vulnerability can allow an unprivileged attacker to gain control of the manageability features provided by the products. The vulnerability may be exploited in two ways. An unprivileged network attacker can gain system privileges to provisioned Intel manageability SKUs or an unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on the three affected tools.
Recommended Action:
Updating the issues patches as a priority measure will safeguard the users.
Our Past post on Intel:
This feature is mostly used for computers running vPro processors bought by business customers to administer large fleets of computers thus becoming a matter of concern for them. According to the advisory, this escalation of privilege vulnerability can allow an unprivileged attacker to gain control of the manageability features provided by the products. The vulnerability may be exploited in two ways. An unprivileged network attacker can gain system privileges to provisioned Intel manageability SKUs or an unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on the three affected tools.
Recommended Action:
Updating the issues patches as a priority measure will safeguard the users.
Our Past post on Intel:
Intel Shows How A PROCESSOR Is Made!
Post made by
No comments:
Post a Comment