{"id":7499,"date":"2017-05-02T04:31:32","date_gmt":"2017-05-02T12:31:32","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2017\/05\/02\/news-1284\/"},"modified":"2017-05-02T04:31:32","modified_gmt":"2017-05-02T12:31:32","slug":"news-1284","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2017\/05\/02\/news-1284\/","title":{"rendered":"Vulnerability hits Intel enterprise PCs going back 10 years"},"content":{"rendered":"<p><img decoding=\"async\" src=\"http:\/\/zapt1.staticworld.net\/images\/article\/2017\/01\/cybersecurity-100702290-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Michael Kan| Date: Tue, 02 May 2017 03:34:00 -0700<\/strong><\/p>\n<p>Intel is reporting a firmware vulnerability that could let attackers take over remote management functions on computers built over nearly the past decade.<\/p>\n<p>The vulnerability, disclosed on Monday, affects features in Intel firmware that are designed for enterprise IT management. \u00a0<\/p>\n<p>Enterprises using Intel Active Management Technology, Intel Small Business Technology and Intel Standard Manageability on their systems should patch them as soon as possible, the company says.<\/p>\n<p>The vulnerable firmware features can be found in some current Core processors and all the way back to Intel&#8217;s first-generation Core, called Nehalem, which shipped in 2008. They&#8217;re part of versions 6.0 through 11.6 of Intel&#8217;s manageability firmware.<\/p>\n<p>No consumer PCs are affected, the company said. Nor are data-center servers running Intel Server Platform Services.<\/p>\n<p>Intel Active Management Technology is a feature in Core processors that lets organizations remotely track, manage and secure whole fleets of connected computers.<\/p>\n<p>For example, it can be used to monitor and repair retail checkout systems, digital signage and PCs at places like stores, offices and schools.<\/p>\n<p>Intel didn\u2019t provide technical details of the vulnerability, but it said a hacker could use the flaw to take over the remote management functions.<\/p>\n<p>In an email, Intel said it learned about the vulnerability from a security researcher in March. \u201cWe are not aware of any exploitation of this vulnerability,\u201d the company said.<\/p>\n<p>Intel said it has prepared a patch and is working with manufacturers to roll it out to users as soon as possible.<\/p>\n<p>Intel\u2019s <a href=\"https:\/\/security-center.intel.com\/advisory.aspx?intelid=INTEL-SA-00075&amp;languageid=en-fr\" target=\"_blank\">security advisory<\/a> also lays out steps users can take to find out if they\u2019re affected. For example, PCs built with its\u00a0<a href=\"https:\/\/communities.intel.com\/docs\/DOC-5693\" target=\"_blank\">vPro technology<\/a>\u00a0will have the vulnerable Intel Active Management feature.<\/p>\n<p>In addition, the advisory has tips for what to do if there&#8217;s no firmware update available from the system manufacturer. Disabling or removing a Windows service called Local Manageability Service can mitigate the vulnerability, Intel said.\u00a0<\/p>\n<p><a href=\"http:\/\/www.computerworld.com\/article\/3193830\/security\/vulnerability-hits-intel-enterprise-pcs-going-back-10-years.html#tk.rss_security\" target=\"bwo\" >http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"http:\/\/zapt1.staticworld.net\/images\/article\/2017\/01\/cybersecurity-100702290-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Michael Kan| Date: Tue, 02 May 2017 03:34:00 -0700<\/strong><\/p>\n<article>\n<section class=\"page\">\n<p>Intel is reporting a firmware vulnerability that could let attackers take over remote management functions on computers built over nearly the past decade.<\/p>\n<p>The vulnerability, disclosed on Monday, affects features in Intel firmware that are designed for enterprise IT management. \u00a0<\/p>\n<p>Enterprises using Intel Active Management Technology, Intel Small Business Technology and Intel Standard Manageability on their systems should patch them as soon as possible, the company says.<\/p>\n<p>The vulnerable firmware features can be found in some current Core processors and all the way back to Intel&#8217;s first-generation Core, called Nehalem, which shipped in 2008. They&#8217;re part of versions 6.0 through 11.6 of Intel&#8217;s manageability firmware.<\/p>\n<p class=\"jumpTag\"><a href=\"\/article\/3193830\/security\/vulnerability-hits-intel-enterprise-pcs-going-back-10-years.html#jump\">To read this article in full or to leave a comment, please click here<\/a><\/p>\n<\/section>\n<\/article>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[11062,10643],"tags":[12124,714],"class_list":["post-7499","post","type-post","status-publish","format-standard","hentry","category-computerworld","category-independent","tag-infrastructure-management","tag-security"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/7499","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=7499"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/7499\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=7499"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=7499"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=7499"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}