Intel Management Engine SA-00086 vulnerability

[PhilDavidson]

The Intel tool reports the following about my HP Envy laptop. Please help me find the software fix necesary to remove this vulnerability.

-----------------------------------------

Risk Assessment

Based on the analysis performed by this tool: This system is vulnerable.


Explanation:
The detected version of the Intel(R) Management Engine firmware is considered vulnerable for INTEL-SA-00086. Contact your system manufacturer for support and remediation of this system.
For more information refer to the INTEL-SA-00086 Detection Tool Guide or the Intel Security Advisory Intel-SA-00086 at the following link: https://www.intel.com/sa-00086-support

INTEL-SA-00086 Detection Tool

Application Version: 1.0.0.152
Scan date: 12/25/2017 6:31:15 PM

Host Computer Information

Name: KAREN-HP2
Manufacturer: HP
Model: HP ENVY x360 m6 Convertible
Processor Name: Intel(R) Core(TM) i5-6200U CPU @ 2.30GHz
OS Version: Microsoft Windows 10 Home

Intel(R) ME Information

Engine: Intel(R) Management Engine
Version: 11.0.0.1180
SVN: 1

Copyright(C) 2017, Intel Corporation, All rights reserved.

[CherylG]

@PhilDavidson

HP has the updated drivers posted in this security Bulletin:

https://support.hp.com/us-en/document/c05843704

[PhilDavidson]

Yes, I checked the support page but found no updated driver. Here is the model info from the system information:

Product name:HP ENVY x360 m6 Convertible
Product number:M1V66UA#ABA
Serial number:8CG5481X7L
BIOS:F.16-10/08/2015
Keyboard revision:84.28
Total memory:8.00 GB
Processor name:Intel(R) Core(TM) i5-6200U CPU @ 2.30GHz

[CherylG]

It is posted here:

https://support.hp.com/us-en/document/c05843704

[CherylG · Accepted solution]

@PhilDavidson

It is also posted on your drivers page: Intel Platform ME Firmware Update:

http://ftp.hp.com/pub/softpaq/sp82001-82500/sp82271.exe

[PhilDavidson]

That page is confusing. It lists dozens of HP models, none of which exactly matches my model or product number. Which driver do I choose? Is it the SP82271 "softpaq"?

Also, the page does not mention the Intel-SA-00086 vulnerability.

[PhilDavidson]

Okay, I ran the update from http://ftp.hp.com/pub/softpaq/sp82001-82500/sp82271.exe and it satisfied the Intel tool that detected the vulnerability.

This problem would be a good candidate for the HP Support Assistant to detect, or for the Support Assistant to direct users to the fix.

[CherylG]

@PhilDavidson

HP SA is not the most dependable tool in the box,imo. It clearly missed that update for your model listed right on your drivers page. It is a good basic tool and has some fairly good diagnostics but I always suggest going straight to the Support page to check for updates manually in many cases.