Intel® CSME Version Detection Tool

there are two versions 1.5 & 5MB the last one being for Pro PCs I think yours and 1.5MB version in LP so but you can check via MEinfo
Otherwise all 15.x firmwares are here

Serie 15.x (station-drivers.com)

duttyend a scris:

Thanks Tom.
Can you confirm I have to flash the latest 15.xxx LP firmware?
I read several times the topic on Win Raid forum but they don't talk about laptop chipset (mine is Intel Tiger Lake-UP3 PCH-LP)...
 

It is very likely that your version is the LP version (there is no real difference whether laptop or desktop), but you may should first confirm with the MEAnalyzer Tool to make sure.
There are currently two versions for your notebook available, one is v15.0 CON LP B v15.0.47.2521 and one is v15.0 CON H B v15.0.47.2521.
You'll find the CSME tools here , yours is CSME System Tools v15.0 r15.
The latest offered here is v2473, while the above link is v2521 already.
However, you need for the files I linked also the PMC, PCHC and if it is H version, also PHY (not required for LP version).
I suggest, that you read the guide from plutomaniac how to build the firmware, if you need assistant in that, let us know.
Maybe you can post also a screenshot after you analyzed your current installed Firmware version.

Cheers
Tom

Thank you so much Tom for your awesome response!!!
Fortunately, it seems to be an LP firmware in my case.
Sure, please find attached the output of MEInfoWin64. I don't know if there is sensitive information inside; if this is the case, please tell and I'll reupload edited versions of the screenshots that will stay on the forum.
Have a great day!

No, no sensitive information inside.
So, the latest ME version for you is 15.0 CON LP B v15.0.47.2521
For the Power Management Controller - PMC you download v150.1.20.1042 and
download Platform Controller Hub Configuration - PCHC v15.0.0.1021
All three into the folder of the CSME system tools and select them in the Program Fit.exe which you find in the folder Flash Image Tool. and combine them.
The resulting "FWUpdate.bin" will be flashed in a command window (DOS) with Administrator rights.
You can use either one of the following commands: This will flash the ME firmware and reboot
or This will flash the firmware and you have to manually reboot.

Cheers
Tom

Thank you so much Tom!!!
Your help has been extremely precious...
It worked like a charm and the system isn't vulnerable anymore (see attached screenshots)!
Before adding the files to Flash Image Tool, I selected the correct stepping/revision of my chipset (C0 instead of B0 which was selected by default) in the drop-down list, I don't know if it makes any difference.
Have a great evening!