Three generations of Intel processors are vulnerable to management engine bug

By Jon Martindale Published November 22, 2017

Intel — Image used with permission by copyright holder

It’s rare that the kids, parents, and grandparents are affected by any one problem, but that’s exactly what’s happened with the case of the recently discovered Management Engine bug in Intel processors. The exploit, which makes it possible for the remote takeover of a system, affects not only the latest, eighth generation of Intel CPUs, but the seventh and sixth generations as well (even the best ones).

But this bug doesn’t stop there. On top of affecting almost all desktop and laptop systems sold with Intel hardware since 2015, Xeon processor lines like the E3-1200 v5 and V6 are affected too. As Ars Technica points out, this bug also hits the Atom range of C3000 processors, the E3900 series for Internet of Things devices, and the Apollo Lake Pentium and Celeron N and J series processors.

Recommended Videos

The problem in Intel’s Management Engine (ME) firmware actually enables four different potential exploits, with different versions of the ME affected by different ones. The most severe bug was discovered by researchers in the latest version of the firmware; it allows remote code execution, which potentially allows the takeover of an entire system without having access to the hardware.

Other, somewhat less serious exploits, make it possible to cause system crashes or instability, and to access privileged information about the system.

Despite the widespread nature of the bug(s), there isn’t much consumers can do about it as of yet. Intel has released a detection tool to find out if your system is one of those vulnerable to its effects, with options for a command-line interface and a more consumer-friendly general user interface option. Both highlight what hardware and software your system is running and whether you may be vulnerable to this newly discovered flaw.

If you know or suspect you are affected, the best advice Intel is offering, for now, is to keep an eye on your motherboard or system manufacturer’s website and update your drivers and firmware as and when you can. Lenovo is expected to get an update out by November 23. Dell has confirmed that some 100 of its systems are affected by this bug, though it hasn’t given a time frame for when its firmware update will be released.

Topics

Evergreen writer

Jon Martindale is a freelance evergreen writer and occasional section coordinator, covering how to guides, best-of lists, and…

Computing

Intel is bringing back one of its most frustrating types of CPUs

Intel Core Ultra Series 2 Lunar Lake chipset.

Intel's new Arrow Lake CPUs are a big deal. They utilize an entirely new architecture and come with a new socket, which will help them compete for a spot among the best processors. However, it looks like some upcoming Core 200-series CPUs (the non-Ultra versions) might not use the Arrow Lake/Lunar Lake architecture at all -- they might be rebranded CPUs sporting older CPU tech.

The assumption comes from results in the Crossmark benchmark that were posted to Bapco and first pointed out by Everest on X (formerly Twitter). The result shows the Core 5 210H, but it's not the performance that's interesting. It's the specs. The result shows that the CPU comes with eight cores and 12 threads. That's the rub. Arrow Lake and Lunar Lake don't come with Hyper-Threading, so each core only comes with a single thread.

Computing

I’m worried Intel is making a mistake with Arrow Lake

Someone holding the Core i9-12900KS processor.

For the last several years, every new generation from Intel has felt like a make-or-break moment. Now, with Arrow Lake CPUs, the stakes are even higher. Intel is facing unprecedented financial troubles, and although it still makes some of the best processors, the silicon giant that used to loom over the PC industry isn’t as strong as it once was.

Arrow Lake is yet another major shift. The CPUs kill Intel’s long-standing Hyper-Threading feature. They introduce two new core architectures. And they debut the Core Ultra branding on desktop, along with the new LGA 1851 socket. I’m worried that Intel’s strategy won’t work with Arrow Lake, though.

Computing

Sorry, gamers — Intel’s new CPUs won’t deliver any gains

A render for an Intel Arrow Lake CPU.

Intel is setting expectations for its upcoming Arrow Lake-S desktop CPUs. Although the company is holding strong that the new generation will be competitive with the best processors when they release on October 24, the new range of CPUs won't deliver much, if any, performance gains for gamers -- and that's coming from Intel itself.

To kick off the Arrow Lake generation, now called Intel Core Ultra 200S, Intel is releasing five processors. You can see the standard Core Ultra 9, 7, and 5 models in the table below, along with Core Ultra 7 and 5 models that cut the integrated graphics for a slightly lower price. All five of the processors are unlocked for overclocking with the new LGA 1851 socket. Unlike AMD's new Zen 5 CPUs, Core Ultra 200S chips require a new motherboard as Intel retires its LGA 1700 socket.