Intel®, AMD® & Microsoft® Speculative Execution and Indirect Branch Prediction Side Channel Analysis Method Security Vulnerabilities  (also known as “Spectre” and “Meltdown”)

NOTICE: The information in this Security Bulletin should be acted upon as soon as possible.

Source: Intel® Article ID: Intel SA-00088 / AMD Security Notice / MS Security Advisory: ADV18002

Potential Security Impact: Toshiba is aware of the Intel® & AMD CPU Side-Channel analysis vulnerability, and we are diligently working to provide updates for all impacted models. The security and privacy of customers' information are priorities for Toshiba. Toshiba is working closely with Intel, AMD & Microsoft to address the situation and are working to release firmware & software updates to fix the security vulnerability. Firmware update details for these platforms will be added to this document as they become available and we recommend customers update their systems to the latest Firmware and apply all of Microsoft System Updates as they become available.

Toshiba highly recommends system owners ensure that systems are physically secured where possible, and follow good security practices to ensure that only authorized personnel have hands-on access to devices.

In addition, Toshiba encourages customers to review both Intel’s Security Advisory, AMD Security Notice & Microsoft Advisory Notice for information, including appropriate identification and mitigation measures.

Available resources

• Intel Security Advisory (INTEL-SA-00088)
  • https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088&languageid=en-fr
• Facts about Side-Channel Analysis and Intel Products
  • https://www.intel.com/content/www/us/en/architecture-and-technology/facts-about-side-channel-analysis-and-intel-products.html
• Other variants of this side-channel analysis are being addressed by Operating System and Software Vendors.  For more details see
  • CVE-2017-5753 https://01.org/security/advisories/intel-oss-10002
  • CVE-2017-5754 https://01.org/security/advisories/intel-oss-10003
• Microsoft Advisory Notice (ADV180002)
  • (https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002).
• AMD Processor Security Notice
  • (http://www.amd.com/en/corporate/speculative-execution).

Firmware Release Details:

• Dates in this list are provided for customer planning purposes and will be updated with links to downloadable packages when available.

• Check Table below to see if your system has been impacted and the vulnerability update is available.
  • No actions are required if you system is not listed.
• Download and install the latest firmware update.
  • The systems below are affected and will require the Intel firmware update. 

Toshiba’s Firmware Release Schedule: