Unsolved
This post is more than 5 years old
36 Posts
1
2510
December 5th, 2017 03:00
ME Vulnernability
I see that Dell has published an update timeline for the latest set of vulnerabilities. I have a Precision 5510, and nearly two months to respond to serious security issues is simply insane. I have a few questions:
- Can Dell simply provide a way to disable the ME. It's been a consistent source of security vulnerabilities. I want nothing to do with the ME.
- If that's not possible, can the timeline be accelerated to a more normal one (I'd expect a security patch in a few weeks, maximum, not two months.)
- In all cases, will the patch be something that can be applied from Linux - or will it be like the Thunderbolt patches, which required Windows in order to be applied.
Thanks.
Timeline:
www.dell.com/.../dell-client-statement-on-intel-me-txe-advisory--intel-sa-00086-
azeu
9 Posts
0
December 12th, 2017 04:00
I agree with your comments.
Dell escalations team advised:
"There have been some delays to the updates for this issue - these can be sometimes be down to issues found during validation testing that require further investigation.
I would expect the website to be updated as further information becomes available."
With regard to the market for disabling the Intel Management Engine, this is only applicable to new systems. I don't have any further information on this as this is a business move from Dell. You could contact Dell Sales though to check further what models are included for this.
I did contact them and rest assured it was an exercise in fultility.
Regarding article SLN308237, the web page has many duplications, inconsistencies and out-of-date information and they do not bother to correct the web page.
Not very professional. All my HP business notebooks were updated very quickly with updates from the HP support seection.
azeu
9 Posts
0
December 14th, 2017 02:00
The update dates for my laptops have moved thru the following dates:
12-01-2017
12-08-2017
12-22-2017
and today presenting 12-25-2017 (Christmas Day)- the next update I suspect will be 01-12-2018.
When it comes to the replacement of my company's laptops, I can assure Dell will not be considered.
I can fully comprehend why people are complaining about Dell's services.
azeu
9 Posts
0
December 18th, 2017 09:00
The date has now changed to 12-23-2017 (fifth change).
azeu
9 Posts
0
December 23rd, 2017 02:00
Now the date has been changed for a sixth time. Dell are clueless.