Unsolved
This post is more than 5 years old
1 Message
1
1327
January 12th, 2018 03:00
BIOS A26, does not fix CVE
Dear support,
I have installed the bios update a26 in our organization.
this bios update should solve the vulnerability Microprocessor Side-Channel Vulnerabilities (CVE-2017-5715, CVE-2017-5753, CVE-2017-5754). but unfortunately after the bios update this is not resolved. I have checked this with powershell by running the following script. # Set-ExecutionPolicy RemoteSigned -Scope Currentuser
Import-Module c: \ ps \ SpeculationControl.psd1
Get-SpeculationControlSettings
according to dell should fix the vulnerabilty after this bios update, but with the 7010 this is not the case. It says behind "hardware support". see powershell screenshot. Does anyone have a solution to this problem, since the is now vulnerable.
Patch Guidance:
There are two essential components that need to be applied to mitigate the above-mentioned vulnerabilities:
- Apply the firmware update via BIOS update listed below, see the table in Dell Consumer and Commercial Client Products Affected section below.
- Apply the applicable operating system patch, see the OS Patch Guidance section below.


letouzey
2 Posts
0
January 12th, 2018 10:00
Srele
1 Message
0
January 13th, 2018 04:00
I have the same problem on my 7010.
letouzey
2 Posts
0
January 26th, 2018 08:00
Update : the description of BIOS A27 for Optiplex 9010 has been updated (on 16 jan 2018), removing any mention of CVE-2017-5715 (Spectre) anymore, leaving only fixes related to Intel ME.
P. Letouzey