Intel(R) CSME Version Detection Tool says CPU is vulnerable

[Valfreyja]

Hello all, I used the INTEL CSME Version Detection Tool to check if my CPU was exposed to security threats and it reported that it is. There's no new BIOS version or Firmware available for my laptop tho. Is HP aware of this issue? Thank you for any info you'll provide.

[Paul_Tikkanen]

Hi:

Have you updated the BIOS to the latest version HP currently has for your notebook?

You have to select the BIOS version applicable to your notebook's processor which I believe is the Intel Core H45 BIOS update.

Victus by HP 16.1 inch Gaming Laptop PC 16-r0000 Software and Driver Downloads | HP® Support

Have you updated the Intel management engine driver to the latest version HP has for PCs with the Intel 13th gen core processors?

2514.7.16.0

sp160328.exe

[Valfreyja]

Hey there! Yes, BIOS is updated to the one that's on the driver page, v.F.30 released on the 23rd of December.
Regarding the Intel Management Interface no, I do not have that version installed because it is not listed in the driver page of my laptop. The one that's available is v.2407.6.1.0 and the one you linked me is v.2514.7.16.0. How did you find that one? Can I install it without damaging my laptop?

[Paul_Tikkanen]

Hi:

I always check for the latest drivers on a HP business class PC that has the same processor and chipset series as the one that doesn't have the most current driver.

There shouldn't be any reason that I know of why installing the IMEI driver I posted would cause any issues with your notebook. 

I got the driver from the HP Elitebook 860 G10.

[Valfreyja]

Very well! If you say that I can install it then I will trust you as I am not good enough with this tech stuff. I'll give it a try and let you know if the vulnerability gets fixed, should I do something to prepare my pc for the update? Thank you!

[Paul_Tikkanen]

You're very welcome. 

[Valfreyja]

Hello there Paul. I am writing to you again because the package you provided didn't do anything. I installed it, waited for a while because It looked like nothing was being processed in background (there was no CPU usage on task manager) then rebooted but the vulnerability is still there. Is there anything I should do with the folder that was created in my C drive? It's called "sp160328" just like the installer I installed.

[Paul_Tikkanen]

Hi:

Sorry that driver didn't install.

No, it should have worked and at least updated the driver, so it must not be compatible with your notebook.

You can delete that folder from your PC.

The only other suggestion I can offer would be to try the driver directly from Intel:

It indicates that it is good for the Intel 13th Generation Intel® Core™ Processor Family (Raptor Lake)

Intel® Management Engine Drivers for Windows 10* and Windows 11*