How are we to interpret the output of this new tool?
1 Like
As it IS⌠a CSME FW upgrade to 15.0.56.2834 (When available/sharedâŚ) will cover the reported related security mitigation.
1 Like
Got it, so we read this as unpatched? Much prefer the old red and green text.
We read this as âRisk Assessmentâ, this info is passed from Intel to OEMâs and they will implement it according to their schedules.
Any user will wait for the OEM release or manually apply it, if their have enough experience to deal with it, PERIOD.
Leaves an awful lot of unsupported users who canât get such OEM support. ASUS were clear my device had reached the end of the update cycle in 2024, just three years after purchase in 2021.
Not entirely true for all products/lineâŚusers canât simply expect releases as soon as they read any rumor or info from other sources. If you were a user of my generationâŚyouâd understand and not being so impatient, but almost sure youâre 20 to 30 yrs old younger than me and never worked with device as this one⌠or i may be wrong about it.
All the best, over_n_out.
1 Like
11.9.5.3098_CON_LP_C_NPDM_PRD_RGN_CFD22D85.rar (1.3 MB)
& updated MEA.dat (r377+)
MEA.rar (159.1 KB)
2 Likes
1 Like
Hi all!
Can anyone share FIT 15.0.30.1776, please?
sorry to ask but is 11.9.5 the latest one released because it doesnât appear so from the Intel CSME results
See my post here: Intel Management Engine Firmware 11.8
CSME Firmware Update
The 11.9.5.3098 firmware is a security update that fixes INTEL-SA-01371, INTEL-SA-01372, and several previous vulnerabilities.
However, the new CSMEVDT 15.04.22 still reports that there are additional CSME security mitigations provided to system manufacturers.
This is expected with an older laptop:
Intel releases new CSME security fixes
â
The OEM adapts and tests the firmware for the specific laptop
â
11.9.5.3098 is now installed 
â
CSMEVDT 15.04.22 detects additional OEM mitigations
â
Waiting for a newer OEM firmware release
So, the 11.9.5.3098 update was successful and fixes the vulnerabilities listed in its release notes.
The CSMEVDT message simply means that additional mitigations may still require a newer firmware release from the laptop manufacturer.
Intelâs website
says something different, version 11.9.6 will fix this vulnerability, and 11.9.5 probably doesnât fix it, at least thatâs what Intelâs website says.
So, there you go, exactly what @africabloe statedâŚwe just share it as they come along.
I think ME Firmware Ver.11.9.5.3098 was first released here solutions.vaio.com/6675 on August 24, 2026 for certain older VAIO models (which are still supported by their manufacturer) to address the following vulnerabilities:
INTEL-SA-01372 (CVE-2026-6726)
INTEL-SA-01371 (CVE-2026-6727)
INTEL-SA-01280 (CVE-2025-20067)
INTEL-SA-01209 (CVE-2025-2884)
INTEL-SA-00613
The firmware was probably extracted from there and the rest of us - with older laptops - can enjoy the latest protection.
However, the firmware date is actually 6 months older.
So, letâs hope there will be a new release from an OEM in the future.
The VAIO manufacturer may have been misleading regarding the INTEL-SA-01372 (CVE-2026-6726) vulnerability.
INTEL-SA-01371 (CVE-2026-6727). If this were the case, they would have released version 11.9.6, which Intel specifies on its website, and not 11.9.5. The version image is from February 2026, before the vulnerability was disclosed in August 2026, and the vulnerability only affects firmware 11.x.
The TPM vulnerability was discovered almost a year ago. If you look at certifications you would see that in spring-summer ALL major TPM chip manufacturers released/certified new firmwares.
For example a few weeks ago Dell released STM33 firmware 1.771.0.0 update tool that was signed on 28th of January! Infineon released new firmwares in March to fix the same reference TPM code bug - of course with no changelog, they only published the information on 10th of August like the rest of manufacturers when the embargo period ended.
Everyone is using the reference TPM code in their chips or even in fTPM. The chips are different on the manufacturing and architecture level for STmicro/Infineon/Nuvoton - but they are all a âdockerâ to run the TPM reference code, with each manufacturer having their own extra TPM commands for updating the firmware. Sometimes some manufacturer has customized a function in the reference TPM code so much that the same bug does not manifest but this time it literally hit everyone.
Does anyone still have Intel ME System Tools v8.1 r6 or r7?
Iâm interested in ME Debug Tools v8.0.0.1173 that were included in those archives, since they can be used as generic POST card plugged into (SO)DIMM slot, after using those tools with reference setup using aardvark.
11.9.6.3173_CON_LP_C_NPDM_PRD_RGN_3FAA04DD.rar (1.3 MB)
11.9.6.3173 CON LP C NPDM PRD RGN 3FAA04DD
2026-07-30
2 Likes