Intel® Active Management Technology (AMT), Escalation of Privilege Vulnerability

NOTICE: The information in this Security Bulletin should be acted upon as soon as possible.

Potential Security Impact: Remote escalation of privilege on provisioned systems or local escalation of privilege on unprovisioned systems.

Source: Intel® Corporation (“Intel®”)

VULNERABILITY SUMMARY:

On May 1 2017, Intel® announced a security advisory regarding a critical firmware vulnerability in certain systems that utilize Intel® Active Management Technology (AMT), Intel® Standard Manageability (ISM) or Intel® Small Business Technology (SBT). The vulnerability could enable a network attacker to remotely gain access to business PCs or devices that use these technologies.

Toshiba PC's that were introduced in the market since 2010 which incorporate Intel® vPro™ CPU may be impacted. Toshiba is working closely with Intel® to validate their fix and ensure it works across Toshiba’s range of products. Until firmware updates are available, it is recommended that people and companies using Toshiba PCs and devices that incorporate AMT, ISM or SBT to take steps to maintain the security of their systems and information.

For general guidance on this issue, please see this announcement from Intel - http://www.intel.com/content/www/us/en/architecture-and-technology/intel-amt-vulnerability-announcement.html

Intel® has provided the following mitigation options that may be used prior to the firmware being deployed:

Step 1: Determine if you have an Intel® AMT, Intel® SBA, or Intel® ISM capable system by running Intel's downloadable discovery tool, which will analyze your PC for the vulnerability.

• If you determine that you do not have an Intel® AMT, Intel® SBA, or Intel® ISM capable system then no further action is required.
• If you are unable to run the discovery tool follow the Step 2 below to determine if your PC is impacted by the Intel security advisory.
• If your PC is affected using the discovery tool, go to Step 3 below to locate your PC model and firmware availability.

Step 2: Review the INTEL-SA-00075 Detection Guide to assess if your PC has the impacted firmware.

Step 3: Download and run the firmware update tool provided by Toshiba.

For help finding your model number CLICK HERE

Toshiba’s AMT Firmware Release Schedule:

* The information in this document is subject to change without notice.
* "Intel" is a trademark of Intel Corporation in the U.S. and other countries.
* Other names and brands may be claimed as the property of others.