Vulnerabilities - Intel SA 00075 - Windows
Log In or Register to download the BES file, and more.

0 Votes

Versioning - This is the latest version.

1Vulnerabilities - Intel SA 00075 - Windows5/9/2017 9:36:43 AM
2Vulnerabilities - Intel SA 00075 - Windows5/12/2017 1:52:10 PM

Description

This Analysis provides the results for the the Intel SA 00075 Probe on a system to determine if it is vulnerable.

Please use the Fixlet: Invoke - Intel SA 00075 Probe - Windows to populate results for a system. Please use Fixlet: Invoke - Intel SA 00075 Unprovision Active Management Technology - Windows and Fixlet: Invoke - Intel SA 00075 Remove Local Management Service - Windows to resolve the Vulnerability.

A value of Vulnerable means your firmware version is vulnerable to the exploit. A value of Exposed means that you are vulnerable and the required processes for exploitation are currently exposed.

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory


Property Details

ID2998555
TitleVulnerabilities - Intel SA 00075 - Windows
DomainBESC
Added by on 5/12/2017 1:52:10 PM
Last Modified by on 5/12/2017 1:52:10 PM
Counters 2824 Views / 87 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 0 ratings. ** Log In or Register to add your rating.

Properties

Intel SA 00075 - Vulnerable - Windows
Period 30 minutes
 
  * Results in a true/false
Show indented relevance
(if (it = 1) then ("Vulnerable") else ("Not Vulnerable")) of (values "Vulnerable" of keys "HKEY_LOCAL_MACHINE\SOFTWARE\Intel\Setup and Configuration Software\INTEL-SA-00075 Discovery Tool\ME Firmware Information" of x32 registry)
Intel SA 00075 - Exposed - Windows
Period 30 minutes
 
  * Results in a true/false
Show indented relevance
(if (it = 1) then ("Exposed") else ("Not Exposed")) of (values "Exposed" of keys "HKEY_LOCAL_MACHINE\SOFTWARE\Intel\Setup and Configuration Software\INTEL-SA-00075 Discovery Tool\ME Firmware Information" of x32 registry)
Intel SA 00075 - Last Scan - Windows
Period 30 minutes
 
  * Results in a true/false
Show indented relevance
values "Scan Date" of keys "HKEY_LOCAL_MACHINE\SOFTWARE\Intel\Setup and Configuration Software\INTEL-SA-00075 Discovery Tool" of x32 registry
Intel SA 00075 - Provisioning State - Windows
Period 1 hour
 
  * Results in a true/false
Show indented relevance
values "ME Provisioning State" of keys "HKEY_LOCAL_MACHINE\SOFTWARE\Intel\Setup and Configuration Software\INTEL-SA-00075 Discovery Tool\ME Firmware Information" of x32 registry
Intel SA 00075 - LMS State - Windows
Period 1 day
 
  * Results in a true/false
Show indented relevance
states of services "LMS" whose (display name of it contains "Local Management Service")

Relevance

isWindows (Relevance 1172)
Used in 1127 fixlets and 529 analyses   * Results in a true/false
Show indented relevance
windows of operating system
Used in 8 fixlets and 1 analsis   * Results in a true/false
Show indented relevance
(brand string of main processor as lowercase) contains "intel"

Sharing

Social Media:
Share this page on Yammer

Comments