ME Firmware Update for Vig450J_Vig451J_ME9_D3348_9.1.41.3024


In an advisory note on May 1 2017, Intel published security information about an escalation of
privilege vulnerability in Intel® Active Management Technology (AMT), Intel® Standard Manageability (ISM),
and Intel® Small Business Technology.
Reference: INTEL-SA-00075 or CVE-2017-5689.


Summary:
There is an escalation of privilege vulnerability in Intel® Active Management Technology (AMT),
Intel® Standard Manageability (ISM), and Intel® Small Business Technology 
firmware versions 6.x, 7.x, 8.x 9.x, 10.x, 11.0, 11.5, and 11.6 that can allow an
unprivileged attacker to gain control of the manageability features provided by these products.
This vulnerability does not exist on Intel-based consumer PCs.


Description:
• An unprivileged network attacker could gain system privileges to provisioned Intel
  manageability SKUs: Intel® Active Management Technology (AMT) and Intel® Standard Manageability (ISM).
• An unprivileged local attacker could provision manageability features gaining unprivileged
  network or local system privileges on Intel manageability SKUs: Intel® Active Management Technology (AMT),
  Intel® Standard Manageability (ISM), and Intel® Small Business Technology (SBT).


Recommended steps:

• Determine if you have an Intel® AMT, Intel® SBA, or Intel® ISM capable system
• Download and install the appropriate ME firmware update package