CVE-2017-5689: An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology… (Update: proof of concept on GitHub published)

Update: proof of concept on GitHub published. Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM) are affected by a flaw that lets an attacker completely bypass web interface authentication and log in as admin with any password, or even an empty digest response, reaching it remotely over the network without logging in on systems where AMT is provisioned and its web interface is reachable. Public exploit code, in...