Dynabook |
Archive.
Back
Intel Firmware Vulnerability
Intel Corporation (“Intel”) announced that there is an escalation of privilege vulnerability in the remote manageability feature via certain Intel’s products, including Intel® Active Management Technology firmware. Firmware update for Toshiba products is in preparation. Until the firmware update is available, customers who have an affected product are recommended to keep this feature disabled (please see 3. Recommendations).
1. Intel’s security information on vulnerability
Intel published security information about an escalation of privilege vulnerability in Intel® Active Management Technology, Intel® Standard Manageability, and Intel® Small Business Technology firmware (*) that can allow an unprivileged attacker to gain control of the manageability features provided by these products.
Please check the detail on Intel’s website:
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr
(*) only “Intel® Active Management Technology” is incorporated in Toshiba products.
2. Affected Products
All Toshiba products introduced in the market since 2010 which incorporate an Intel® vPro™ CPU.
Please check the product list to determine if you have an affected product. If in any doubt, you can use a tool that Intel have provided to check if you have an affected product: https://downloadcenter.intel.com/download/26755
3. Recommendations
Firmware update for Toshiba products will be available after the end of May, 2017. Toshiba will publish detailed schedule information on this website:
https://go.toshiba.com/intelsecuritynotice
As an option to mitigate against the possibility of an unprivileged network attacker, Toshiba recommends customers to disable “Intel® Active Management Technology” in accordance with the steps detailed in the below website:
https://downloadcenter.intel.com/download/26754
1. Intel’s security information on vulnerability
Intel published security information about an escalation of privilege vulnerability in Intel® Active Management Technology, Intel® Standard Manageability, and Intel® Small Business Technology firmware (*) that can allow an unprivileged attacker to gain control of the manageability features provided by these products.
Please check the detail on Intel’s website:
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr
(*) only “Intel® Active Management Technology” is incorporated in Toshiba products.
2. Affected Products
All Toshiba products introduced in the market since 2010 which incorporate an Intel® vPro™ CPU.
Please check the product list to determine if you have an affected product. If in any doubt, you can use a tool that Intel have provided to check if you have an affected product: https://downloadcenter.intel.com/download/26755
3. Recommendations
Firmware update for Toshiba products will be available after the end of May, 2017. Toshiba will publish detailed schedule information on this website:
https://go.toshiba.com/intelsecuritynotice
As an option to mitigate against the possibility of an unprivileged network attacker, Toshiba recommends customers to disable “Intel® Active Management Technology” in accordance with the steps detailed in the below website:
https://downloadcenter.intel.com/download/26754
- The information in this document is subject to change without notice.
- ”Intel” is a trademark of Intel Corporation in the U.S. and other countries.
- Other names and brands may be claimed as the property of others.