Exposure of Internal Functions

Summary

There is a vulnerability affecting the EAX‑C246P‑B1R mainboard, related to the reported Intel vulnerability CVE‑2022‑44611, which may allow privilege escalation in ibaRackline systems.

We were not able to reproduce the issue, and the mainboard manufacturer was also unable to reproduce it. However, we have provided a firmware update that addresses this vulnerability. The update can be downloaded from our website.

Affected products

This applies to all iba products up to the versions listed below:

• ibaRackline systems equipped with EAX‑C246P‑B1R or EAX‑C246P‑B1 mainboards with a BIOS version lower than E246PRS7

How do I know that I’m affected?

Go to System Information → System Summary.

1. First, check whether your system uses this mainboard. To do this, look at the "BaseBoard-Produkt" field. The value should be EAX‑C246P‑B1 (E246PRS5). Info: The number in brackets represents the current BIOS version. It may differ depending on the system. If the version is lower than E246PRS7, the system is affected.
2. Second, check the value in the "BIOS Version/Date" field. If the value is lower than or equal to American Megatrends Inc. 5.13, 11/04/2025, the system is affected.

Solution

Important Notice/Warning:

Before you perform these steps, make sure that you have a working backup of your system.

If you are using a software license, ensure that the license is returned to WIBU before starting.

Do not disconnect the power from the PC during the BIOS update process.

Info:

Documentation with pictures for installing the BIOS update is included in the BIOS update’s file archive.

Update to the Latest BIOS Version: E246PRS7

1. Download the BIOS update from the iba Download Center. You can find the BIOS update there.
2. To update the BIOS, you need a USB flash drive formatted with FAT32.
3. Unzip the file E246PRS7 and copy all files to the root directory of the USB flash drive.
4. Connect the prepared USB flash drive to the ibaRackline.
5. Reboot the ibaRackline and press Del (Entf) to enter the BIOS.
6. Navigate to Advanced → PCH-FW Configuration → Firmware Update Configuration → ME FW Image Re-Flash, and set it to Enabled.
7. Select Save & Exit, reboot the system, and enter the Boot Menu again.
8. Go to Save & Exit → Boot Override, then select the USB stick listed there.
9. Look for the removable hard disk and its alias (e.g., fs0). The alias depends on how many storage devices are connected to the PC. You can check this by using the ls command. If you are in the correct directory, the file BIOS.nsh should be listed.
10. Execute the command BIOS.nsh and press Enter to start the automatic BIOS update.
11. Wait until the BIOS update process is completed, then reboot the PC.
12. Verify the update via System Information → System Summary → BIOS Version/Date, and confirm that version E246PRS7 is displayed in brackets under the BaseBoard Product field.

Customer Actions

Update the BIOS to version E246PRS7 as described in the Solution section

Timeline