Intel AMT Releases Security Update For Some Processors

September 17, 2020

Written by wukovits

intel amt releases security update for some processorsRecently, Intel released a very important update designed to address nine separate security flaws in their chipsets as part of their September 2020 Platform Update.

Of the flaws addressed by this fix, one of them is a critical issue revolving around the company’s Active Management Technology (AMT) and Intel Standard Manageability platforms.

That’s important because the AMT is used in a wide range of Intel Processors and correcting that flaw in particular helps keep a vast number of machines safe.

This vulnerability, tracked as CVE-2020-8758 has a severity score of 9.8 and is especially dangerous because it allows remote escalation of privileges when successfully executed. At the root, the vulnerability exists due to improper buffer restrictions in the network subsystem.

Jerry Bryant, Intel’s Director of Communications, had this to say about the issue:

For customers using Intel vPro systems that do not have AMT provisioned, an authenticated user with local access to the system may still be able to escalate privileges. If the platform is configured to use Client Initiated Remote Access (CIRA) and environment detection is set to indicate that the platform is always outside the corporate network, the system is in CIRA-only mode and not exposed to the network vector.”

The central question then, is are you vulnerable and do you need the update? The simple answer is that you’re vulnerable if you have any of the following AMT and ISM versions (or older):

  • 11.8.79
  • 11.12.79
  • 11.22.79
  • 12.0.68
  • 14.0.39

If there’s a silver lining to be found, it lies in the fact that there’s currently no evidence that this flaw is being actively exploited by hackers.

Naturally, given time, that will change, so the clock is ticking to get your systems updated.

A full list of the flaws addressed by the latest update is available on Intel’s website, but if it’s been a while since you’ve applied one, this one is well worth making a priority.

Used with permission from Article Aggregator

Bayou Tech

We provide solutions for your business. Find out how we can help.

Related Articles

Key Considerations for Effective Cybersecurity Implementation

Consider this: In the realm of cybersecurity, things often get tangled in the web of "you should do it anyway" arguments. Yet, for busy business owners bombarded with daily "must-dos," deciphering the essentials from the fluff can feel like a cyber maze. We aim to...

Unlocking Small Business Success: The Impact of AI in a Digital Era

In the rapidly evolving business landscape, staying competitive necessitates embracing technological advancements. Artificial Intelligence (AI), once perceived as a luxury for larger enterprises, is now accessible to small businesses, offering new opportunities for...

Send us a message

Your message was sent.