{"id":13536,"date":"2020-03-06T16:40:00","date_gmt":"2020-03-06T15:40:00","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=13536"},"modified":"2021-08-21T07:11:58","modified_gmt":"2021-08-21T05:11:58","slug":"vulnerability-in-intel-x86-root-of-trust","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2020\/03\/06\/vulnerability-in-intel-x86-root-of-trust\/","title":{"rendered":"Vulnerability in &lsquo;Intel x86 Root of Trust&rsquo;"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" style=\"float: left; margin: 0px 10px 0px 0px; display: inline\" src=\"https:\/\/www.borncity.com\/blog\/wp-content\/uploads\/2015\/01\/Schutz.jpg\" width=\"40\" align=\"left\" height=\"47\">[<a href=\"https:\/\/www.borncity.com\/blog\/2020\/03\/06\/bug-in-chips-zerstrt-intel-x86-root-of-trust\/\" target=\"_blank\" rel=\"noopener noreferrer\">German<\/a>]All Intel CPUs released in the past five years contain an unfixable flaw, that affects the 'Intel x86 Root of Trust'. Intel tried to patch to lessen the damage of exploits. But security researcher say that's not enough to protect the system 100 %. <\/p>\n<p><!--more--><\/p>\n<p> Security firm Positive Technologies has published this article about the case and wrote: 'The scenario that Intel system architects, engineers, and security specialists perhaps feared most is now a reality.' A vulnerability found in the ROM of the Intel Converged Security and Management Engine (CSME) allows a compromise at the hardware level. So it destroys Intel's chain of trust.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" title=\"Mainboard\" alt=\"Mainboard\" src=\"https:\/\/i.imgur.com\/bsYodMo.jpg\" width=\"618\" height=\"412\"><br \/>(Quelle: Pexels Fancycrave CC0 License) <\/p>\n<p>Positive Technologies security researchers have discovered an error in Intel hardware, as well as an error in Intel CSME firmware at the very early stages of the subsystem's operation, in its boot ROM. Advanced attackers can exploit the flaw to bypass Intel's Enhanced Privacy ID (EPID) (which provides on-chip encryption capabilities) and digital rights management protections for proprietary data. Details may be read within the Positive Technologies article or within <a href=\"https:\/\/arstechnica.com\/information-technology\/2020\/03\/5-years-of-intel-cpus-and-chipsets-have-a-concerning-flaw-thats-unfixable\/\" target=\"_blank\" rel=\"noopener noreferrer\">this Arstechnica article<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>[German]All Intel CPUs released in the past five years contain an unfixable flaw, that affects the 'Intel x86 Root of Trust'. Intel tried to patch to lessen the damage of exploits. But security researcher say that's not enough to protect &hellip; <a href=\"https:\/\/borncity.com\/win\/2020\/03\/06\/vulnerability-in-intel-x86-root-of-trust\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[580],"tags":[599,69],"class_list":["post-13536","post","type-post","status-publish","format-standard","hentry","category-security","tag-intel","tag-security"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/13536","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=13536"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/13536\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=13536"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=13536"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=13536"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}