Intel e lokiselitse tse peli tse mahlonoko (CVE-2020-0594, CVE-2020-0595) ts'ebetsong ea Intel Active Management Technology (AMT) le Intel Standard Manageability (ISM), e fanang ka li-interfaces bakeng sa ho hlahloba le ho laola lisebelisoa. Litaba li lekanyelitsoe boemong bo phahameng ka ho fetisisa (9.8 ho 10 CVSS) hobane bofokoli bo lumella mohlaseli oa marang-rang ea sa netefatsoang hore a fihlele mesebetsi ea taolo ea hardware e hōle ka ho romela lipakete tsa IPv6 tse entsoeng ka mokhoa o khethehileng. Bothata bo hlaha feela ha AMT e ts'ehetsa phihlello ea IPv6, e koetsoeng ka ho sa feleng. Bofokoli bo ile ba lokisoa ho lintlafatso tsa firmware 11.8.77, 11.12.77, 11.22.77 le 12.0.64.
A re hopoleng hore li-chipsets tsa sejoale-joale tsa Intel li na le microprocessor e arohaneng ea Management Engine e sebetsang ntle le CPU le sistimi e sebetsang. Enjene ea Tsamaiso e etsa mesebetsi e hlokang ho aroloa ho OS, joalo ka ts'ebetso ea litaba tse sirelelitsoeng (DRM), ts'ebetsong ea li-module tsa TPM (Trusted Platform Module) le li-interfaces tsa boemo bo tlase bakeng sa ho beha leihlo le ho laola lisebelisoa. Sebopeho sa AMT se u lumella ho fihlella mesebetsi ea tsamaiso ea matla, ho hlahloba sephethephethe, ho fetola litlhophiso tsa BIOS, ho ntlafatsa firmware, ho hlakola li-disks, ho bulela OS e ncha ka thōko (ho etsisa koloi ea USB eo u ka e qalisang), ho tsamaisa lisebelisoa (Serial Over LAN le KVM ho feta. marang-rang) joalo-joalo. Li-interfaces tse fanoeng li lekane ho etsa litlhaselo tse sebelisoang ha ho na le phihlello ea 'mele ho sistimi, mohlala, o ka kenya sistimi ea Live mme o etsa liphetoho ho eona ho ea ho sistimi e kholo.
Source: opennet.ru