The following information from Supermicro has been approved for publication to our customers by experts at Boston Labs.
Security Vulnerabilities Regarding Side Channel Speculative Execution and Indirect Branch Prediction Information Disclosure (CVE-2017-5715, CVE-2017-5753, CVE-2017-5754)
Details regarding a previously undisclosed microprocessor vulnerability that could impact Supermicro systems has been announced and requires a microcode update of the system BIOS along with an operating system update. Commonly referred to as Meltdown and Spectre the vulnerability involves malicious code utilizing a new method of side-channel analysis and running locally on a normally operating platform has the potential to allow the inference of data values from memory.
We are working around the clock to integrate, test and release the updates as soon as they are made available. To address the issue systems will need both an Operating System update and a BIOS update. Please check with operating system or VM vendors for related information.
RESOURCES:
Please see below for information on the available options to address the issue. More systems will be added as soon as they are available. There are several options to upgrade the system BIOS depending Intel CPU generation and operating system.
For X11 and X10 systems please check this page for your specific system or motherboard to determine the BIOS revision required and the availability of that BIOS. Go to the associated motherboard product webpage and download the recommended BIOS
- To quickly find your product do a control-F in your browser and enter your product SKU#
For X9 systems and motherboards check this page. Either download the updated BIOS from the associated product webpage or use the update tool to patch the currently installed BIOS with the required microcode updates.
For X8 systems and motherboard check this page and use the update tool to patch the currently installed BIOS with the required microcode updates.
The copyright to this information belongs to Supermicro who are authors of this content