Intel(R) Management Engine Vulnerability

[Torre1]

According to information online, there is a vulnerability in Intel(R) Management Engine that affects my computer.

Is there any updates from HP to fix this?

This is the output from INTEL-SA-00086 Detection Tool:

INTEL-SA-00086 Detection Tool
Application Version: 1.0.0.128
Computer Name: TORVALD-HP
Scan date: 2017-11-21 16:19:43

*** Host Computer Information ***
Manufacturer: HP
Model: HP Z240 Tower Workstation
Processor Name: Intel(R) Core(TM) i7-6700 CPU @ 3.40GHz
OS Version: Microsoft Windows 7 Professional

*** Intel(R) ME Information ***
Engine: Intel(R) Management Engine
Version: 11.0.18.1002
SVN: 1

*** Risk Assessment ***
Based on the analysis performed by this tool: This system is vulnerable.

Explanation:
The detected version of the Intel(R) Management Engine firmware is considered vulnerable for INTEL-SA-00086.

Contact your system manufacturer for support and remediation of this system.
For more information refer to the SA-00086 Detection Tool Guide or the Intel security advisory Intel-SA-00086 at the following link: https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr

[mdklassen · Accepted solution]

From: https://support.hp.com/us-en/drivers/selfservice/hp-z240-small-form-factor-workstation/8354567

Intel Management Engine Software
 11.7.0.1043 Rev.A
102.1 MB
Oct 7, 2017

See the above page for the "download" link.

____________________________________

Welcome to this forum.

Please click the purple/white "Thumbs Up" icon for every response that is helpful.

Also, please click "Accept As Solution" for the best response.

[Torre1]

I installed that patch and checked again:

*** Intel(R) ME Information ***
Engine: Intel(R) Management Engine
Version: 11.8.50.3399
SVN: 3

*** Risk Assessment ***
Based on the analysis performed by this tool: This system is not vulnerable. It has already been patched.

It worked. 🙂

Thanks for your help.

[mdklassen]

Thanks.  Glad to help.

[yaroze]

Hey there,

what about personal laptops? Are they planning on issuing updates for home users?

Thanx.

[mdklassen]

@yarose wrote:

> what about personal laptops? Are they planning on issuing updates for home users?

Welcome to this forum.

Please open a new thread, and give your computer's model-number and operating system, but not the serial-number, of your computer, and several contributors will rush to be the first to respond. 

[Fred1251]

HP Pavilion Notebook, productnummer= W9U22EA#ABH

a solution will be very much appreciated, thank you

[Fred1251]

unfortunately this solution was very hard to find at your site, NOR didn't  get any service warning email,
perhaps this site can get some update functionality search-change?

anyway

Intel(R) Management Engine Vulnerability  INTEL-SA-00086 is Solved by the ugrade SP83846.exe , THANK YOU and your remote service people, and much obliged!

Regards, Fred

[IsaakC]

I learned about this problem in this video.

The patch list for all HP PCs is here, but it looks like work in progress.

 The download link for my specific laptop is dead at the moment.

-edit- Ah, the page slightly misspelled the link.

-edit- The patch was successful, confirmed by the same detection tool used by Fred1251.

Now for the love of God, please feed this patch into the HP Support Assistant app, instead of leaving the owners wondering.

Intel® has marked this issue as 'critical', so you may want to give it a bit more priority.

[yaroze]

"Now for the love of God, please feed this patch into the HP Support Assistant app, instead of leaving the owners wondering."
Entirely agree.