Intel's firmware bugs:

Intel SA-00086
Intel ID:       INTEL-SA-00086
Product family:         Various
Impact of vulnerability:Elevation of Privilege
Severity rating:        Important
Original release:       Nov 20, 2017
Last revised:   Nov 21, 2017 

https://www.us-cert.gov/ncas/current-activity/2017/11/21/Intel-Firmware-Vulnerability

>From gadgets.ndtv.com:
Security research firm Positive Technologies has said it will demonstrate an 
exploit that allows the running of arbitrary unsigned code on any PC with an 
Intel 6th Gen 'Skylake' Core CPU or later. The security hole exists because of 
Intel's Management Engine, a tiny microprocessor that exists within the 
platform controller, or chipset, of every PC motherboard built for Intel 
processors. The Intel Management Engine (IME) was introduced to allow functions 
such as remote booting and administration, but it also handles the 
initialisation of the CPU and its power management.

Will Harris‏ on twitter comments satirically:
Intel advisory generator: "Multiple unspecified issues in unspecified component 
in unspecified platform of unspecified version allows unspecified process to 
access privileged content via unspecified vector."

Reply via email to