Notification

Icon
Error

Plundervolt - Report missing software component

Posted: Thursday, December 12, 2019 5:10:14 PM(UTC)
rader

NWSF

Member Original PosterPosts: 9
1
Like
Hi Guys,

Thank you for providing information on the Intel Plundervolt Vulnerability Report. I ran the scan on our systems and found some vulnerable processors as I expect most organizations will also have.

Reading more information on the site you link to at plundervolt.com, I see that they also say that if you do not use SGX, you do not need to do anything. It looks like the scanning script just checks for the processors listed in the report. Is there a way to also check the vulnerable processors if SGX is enabled or BIOS undervolting is disabled?

If I'm asking the wrong questions it's probably because I'm still wrapping my head around how SGX and the BIOS are related.

Thanks.
Esben.D
#1Esben.D Member Administration Posts: 1,982  
posted: 12/16/2019 10:07:36 AM(UTC)
I took a look at the database documentation, but I didn't see any field that could be used to identify whether SGX is used.

From what I can tell, you can enable SGX in the bios but it can also be software controlled (if you allow that in the bios). You can find more info here: https://software.intel.c...ns-in-your-applications

If you have the SGX software installed on SGX enabled systems, you could just report on the software. Alternatively, you could do a file scan for sgx_uae_service.dll or sgx_urts.dll as the above page mentions.

I don't know if there is a registry key that could be used to detect this.

Active Discussions

Lansweeper "add cc user" doesn't show the correct listings
by  JLPingree   Go to last post Go to first unread
Last post: Yesterday at 8:12:44 PM(UTC)
Lansweeper Default User Date Format
by  RickW99456  
Go to last post Go to first unread
Last post: Yesterday at 5:00:51 PM(UTC)
Lansweeper Duplicate assets (Servers)
by  FrankSc   Go to last post Go to first unread
Last post: Yesterday at 3:20:28 PM(UTC)
Lansweeper Lansweeper load the disk subsystem
by  Alexey Gorbachev  
Go to last post Go to first unread
Last post: Yesterday at 3:13:17 PM(UTC)
Lansweeper Lost Configuration tab (Admin rights)
by  kspap   Go to last post Go to first unread
Last post: Yesterday at 10:30:12 AM(UTC)
Lansweeper Deployment with different user rights
by  Jupiter_IT  
Go to last post Go to first unread
Last post: Yesterday at 9:39:20 AM(UTC)
Lansweeper cisco fuji device not linking with connected devices
by  char   Go to last post Go to first unread
Last post: 7/5/2020 9:12:07 AM(UTC)
Lansweeper Microsoft CVE-2020-1425
by  Richard_B  
Go to last post Go to first unread
Last post: 7/3/2020 4:29:41 PM(UTC)