Vendors like HP and CIsco have been distributing patches since the day this was publicly disclosed. It appears many other vendors are asleep at the wheel. I've just replaced some Asus hosts as they are yet to be updated. No mention of it on their sites or forums and no response to support requests, yet they even sold TPM modules w Infineon chips as a value add for their kit: The client tells me they will NEVER buy Asus again.
Noone ever got sacked for buying IBM, but what about Asus?
Biting the hand that feeds IT
