Stories
Slash Boxes
Comments

SoylentNews is people

posted by martyb on Tuesday July 31 2018, @10:18AM   Printer-friendly
from the how-do-you-turn-it-off? dept.

Not that anyone is surprised or even cares but two more severe bugs have been found in the Intel Management Engine firmware. They allow remote execution with full privileges:

https://nvd.nist.gov/vuln/detail/CVE-2018-3627
https://nvd.nist.gov/vuln/detail/CVE-2018-3628

An article about these vulnerabilities on Tech Republic provides summaries and lists the affected processors.


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 3, Insightful) by MichaelDavidCrawford on Tuesday July 31 2018, @11:14AM (4 children)

    by MichaelDavidCrawford (2339) Subscriber Badge <mdcrawford@gmail.com> on Tuesday July 31 2018, @11:14AM (#715135) Homepage Journal

    You say that like it's a bad thing.

    --
    Yes I Have No Bananas. [gofundme.com]
    Starting Score:    1  point
    Moderation   +1  
       Insightful=1, Total=1
    Extra 'Insightful' Modifier   0  
    Karma-Bonus Modifier   +1  

    Total Score:   3  
  • (Score: 5, Informative) by stormwyrm on Tuesday July 31 2018, @01:14PM (3 children)

    by stormwyrm (717) on Tuesday July 31 2018, @01:14PM (#715164) Journal
    Well, in this case, you're spot on. If these bugs are severe enough to lead to a deep enough compromise of that hated management engine serious enough that it enables the owner to replace the unknown code in there with code that serves the user rather than Intel or its masters, it indeed isn't a bad thing.
    --
    Numquam ponenda est pluralitas sine necessitate.
    • (Score: 2) by DannyB on Tuesday July 31 2018, @01:33PM (2 children)

      by DannyB (5839) Subscriber Badge on Tuesday July 31 2018, @01:33PM (#715176) Journal

      If management is good, then remote management must be even gooder.

      --
      People today are educated enough to repeat what they are taught but not to question what they are taught.
      • (Score: 2) by bob_super on Tuesday July 31 2018, @04:25PM (1 child)

        by bob_super (1357) on Tuesday July 31 2018, @04:25PM (#715262)

        And the supremely goodest thing is remote management which does not disturb the computer's user by leaving tracks or requiring permissions.

        • (Score: 4, Insightful) by DannyB on Tuesday July 31 2018, @04:45PM

          by DannyB (5839) Subscriber Badge on Tuesday July 31 2018, @04:45PM (#715273) Journal

          Even much more better is if the remote management can be done when the user has "turned off" the computer.

          --
          People today are educated enough to repeat what they are taught but not to question what they are taught.