3 ms·

And this exploit would have the same impact: you have to set up this feature in order to be affected.

• rbanffy 9y ago
  Except in large companies it's almost always enabled...
  • palunon 9y ago
    But then these companies wouldn't use the hardware disable, would they ?
    • Sunset 9y ago
      I would. And then I'll play dump when the sysadmin asks why my machine isn't in the list.
      • adrianN 9y ago
        Then the sysadmin enables it and if you disable it again they fire you.
• Kalium 9y ago
  Not entirely. It's locally exploitable even without configuration. Ideally, a physical disable would prevent that.
• wfn 9y ago
  No. > An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs This appears to imply an "exploit $site-backend -> provision AMT -> be vulnerable to network/local attack (for provisioned AMT) -> get AMT system privileges" route.