Intel Management Engine Vulnerability and Surface Devices Surface

    Intel Management Engine Vulnerability and Surface Devices

    Intel Management Engine Vulnerability and Surface Devices

    Category: Surface
    Posted: 12 Dec 2017

    Microsoft is aware of the Intel Management Engine vulnerability (Intel-SA-00086). The Intel vulnerability detection tool currently lists Microsoft Surface devices as vulnerable to this security advisory.Microsoft has investigated the issue and found the following:

    1. Remote exploit of this vulnerability requires Intel Active Management Technology (AMT). Current Surface devices do not allow remote connectivity to the ME because our devices do not run AMT.
    2. Local exploit of this vulnerability requires Direct Connect Interface (DCI) access via USB, which is not provided on Surface devices.

    Because of this, we believe exploits using this vulnerability are significantly reduced on Surface devices. We care deeply about ensuring our devices are reliable and secure and are working with Intel to generate fixes for current devices, which we expect to release in the near future.

    Source: Intel Management Engine Vulnerability and Surface Devices Surface
    Brink's Avatar Posted By: Brink
    12 Dec 2017

  1. Posts : 3,108
    W10 Pro + W10 Preview

    As a Surface user.....thought for a moment reading the misleading title....the need to purchase extra toilet rolls.....but having read the article with an M$ explanation that it should not effect Surface products.
      My Computers

  2. Posts : 4,224
    Windows 10

    This particular vulnerability has proved more "interesting" than previous ones. That's because vulnerable devices REQUIRE a firmware update to patch them. Just went through this on my Asrock motherboards, as recited in a recent blog post: More MEI Weirdness - Windows Enterprise Desktop. Not hard to fix, by any stretch, but demanded daily check-ins on my part and some flailing about when trying to implement the fix.
    Thanks for sharing, Brink. Happy holidays, too!
      My Computers


  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 21:35.
Find Us

Windows 10 Forums