So far, we have not actually identified any existing, exploitable instances of the vulnerable code pattern;
HyperThreading hit on P4 if my memory serves me right.Based on the assumption that branch predictor state is shared between hyperthreads
lanin@debian2:~/test_csme$ sudo python2.7 intel_csme_version_detection_tool
[sudo] пароль для lanin:
Intel(R) CSME Version Detection Tool
Copyright(C) 2017-2020, Intel Corporation, All rights reserved.
Application Version: 5.1.0.0
Scan date: 2022-07-13 06:13:32 GMT
*** Host Computer Information ***
Name: debian2
Manufacturer: ASUSTeK COMPUTER INC.
Model: WS-C621E-SAGE Series
Processor Name: Intel(R) Xeon(R) Gold 5120 CPU @ 2.20GHz
OS Version: Debian GNU/Linux 11 (bullseye) (5.10.0-16-amd64)
*** Intel(R) ME Information ***
Engine: Intel(R) Server Platform Services
Version: 10 4.1.4.381 10 4.1.4.381
*** Risk Assessment ***
Based on the analysis performed by this tool: This system is vulnerable.
Explanation:
The detected version of the Intel(R) Server Platform Services firmware
has a vulnerability listed in one or more of the public Security Advisories.
Contact your system manufacturer for support and remediation of this system.
For more information refer to the Intel(R) CSME Version Detection Tool User Guide
or the related Intel Security Advisory list at:
https://www.intel.com/content/www/us/en/support/articles/000031784/technologies.html
[lanin@freebsd ~/tmp/test_csme]$ sudo python2.7 ./intel_csme_version_detection_tool
Пароль:
Intel(R) CSME Version Detection Tool
Copyright(C) 2017-2020, Intel Corporation, All rights reserved.
Application Version: 5.1.0.0
Scan date: 2022-07-13 07:18:50 GMT
*** Host Computer Information ***
Name: freebsd
Manufacturer: N/A
Model: N/A
Processor Name: N/A
OS Version: FreeBSD 13.1-RELEASE (13.1-RELEASE)
Traceback (most recent call last):
File "./intel_csme_version_detection_tool", line 147, in <module>
sys.exit(main())
File "./intel_csme_version_detection_tool", line 122, in main
(the_err.strerror, the_err.errno))
TypeError: %d format: a number is required, not NoneType
There are very soothing words thereone of the discussions was here