Flaws found in Intel Management Engine (ME), TXE and SPS

Cliff S · 27 Nov 2017

7Zip finds checksums too:

Flaws found in Intel Management Engine (ME), TXE and SPS-image-011.png

Flaws found in Intel Management Engine (ME), TXE and SPS-image.png

ThrashZone · 27 Nov 2017

Hi,
I just flashed my bios last week so it's not in the 0802 bios and not listed to address any issues with IME
Which again seems it would be a chipset driver update since that is where IME installs from.

Runnerbean · 27 Nov 2017

I've got 7zip too so how do I check my download zip file and check the MD5 code first. I've opened the zip and I see a lot various files within. Is there somebody,..anybody that can lend a helping hand please?

ASUS have provided an update but like I said above, I'm still not even sure which one to use because there is a file called MEUpdatetool.exe and the other is called PEUpdater.exe. Which one do I double click on??

Any ASUS Mobo owners in the house!!

fdegrove · 27 Nov 2017

Hi,

MEUpatetool.exe is for flashing MEI chipset, the PEUpdater.exe is ASUS tool for scheduled checking for updates on their servers, it runs in the background as a service.

Cheers,

Cliff S · 27 Nov 2017

Runnerbean said:

I've got 7zip too so how do I check my download zip file and check the MD5 code first. I've opened the zip and I see a lot various files within. Is there somebody,..anybody that can lend a helping hand please?

ASUS have provided an update but like I said above, I'm still not even sure which one to use because there is a file called MEUpdatetool.exe and the other is called PEUpdater.exe. Which one do I double click on??

Any ASUS Mobo owners in the house!!

Open 7Zip, work your way to the download, right click, select CRC, and then select SHA-256, it will create the MD5 and then compare it to the one on the site.

Runnerbean · 27 Nov 2017

So which do I install first? I only want to apply the fix to patch up the security issue.

Runnerbean · 27 Nov 2017

Cliff S said:

Open 7Zip, work your way to the download, right click, select CRC, and then select SHA-256, it will create the MD5 and then compare it to the one on the site.

So what exactly am I pointing 7zip too here? This is the Fix/Patch that ASUS provide. This is why I'm confused with it all. It's not just a single file to install.

Flaws found in Intel Management Engine (ME), TXE and SPS-desktop.png

Cliff S · 27 Nov 2017

Runnerbean said:

So what exactly am I pointing 7zip too here? This is the Fix/Patch that ASUS provide. This is why I'm confused with it all. It's not just a single file to install.

Do not open the downloaded zip file, you want the SHA 256 number for the complete folder.
Also if you have installed(not the portable version the .exe version) 7Zip 64bit .exe version, it is also integrated in the Windows shell, and is included in the right click menu too:

Flaws found in Intel Management Engine (ME), TXE and SPS-image-001.jpg

Flaws found in Intel Management Engine (ME), TXE and SPS-image-002.png

Runnerbean · 27 Nov 2017

Thanks Cliff for your help and taking the time and trouble to post screenshots for me. I've got my ME Driver sorted out now as suggested by ASUS. All I have left to do now is hope someone can advise regarding the two .exe files in the ME security fix/patch from ASUS.

Will the main MEUpdate Tool.exe take care of everything else in the zip folder (including the PEUpdater), or do I have to run the PEUpdater.exe separately? I guess what I'm saying is, have ASUS bundled in two separate things for me to do here or is it just the MEUpdater Tool itself?

sygnus21 · 27 Nov 2017

sygnus21 said:

Look like I'll have to wait for Gigabyte to release a new BIOS for my board as I too failed the test. My 2017 Lenovo ThinkPad Yoga X1 passed though. I just updated the BIOS on that yesterday though.

Anyway it seems Gigabyte is all over the place with their drivers and BIOS updates on my Z270 board - GA-Z270X-Gaming 8 (rev. 1.0) | Motherboard - GIGABYTE

I have an issue where their latest IRST drivers (15.9.0.1015) crash my board. Also found their IME driver listed as version 11.8.50.3420, is NOT what's being downloaded. When downloading from any server I get version 11.7.0.1050. Yet when installed it shows up as version 11.7.0.1045 (dated 10/3/2017).

Their latest BIOS for my board (F7) has been around since July 2017 to "Update CPU micro code to fix HT flaw issue". Yet much later they added a second line stating the BIOS also "Update intel ME for security vulnerabilities". This second line wasn't there when I updated the BIOS in July. With that, I downloaded it again thinking the date was wrong seeing that second line but it's the same BIOS and the failed test persists. Thus I await a new BIOS.

Gigabyte seems clueless on this and don't know when a new BIOS will be released for my board.