Intel AMT Vulnerability
Threat Intelligence from DigitalXRAID’s Security Operations Centre analysts:
Intel has published a warning of a critical vulnerability in it’s enterprise management platform, support for which is included in almost all of it’s processors since the Intel Core processor line.
The vulnerability specifically targets Intel’s Active Management Technology (AMT), Small Business Technology, vPro and Standard Manageability (ISM) platforms. These technologies enable a number of organisation management features. However, the breadth of control that these technologies offer have also become part of what makes this exploit so serious.
The exploit can be used to silently escalate the privileges of malicious code to that of a network or local administrator. It can also be used to control machines over a network.
The exploit is Operating System agnostic, and can run on any version of Window, Mac OS or Linux. Patching the Operating System will not fix this flaw, and a firmware update, delivered by hardware manufacturers, needs to be applied instead, although out of support hardware is likely to remain vulnerable.
Intel has released a vulnerability scanner, with which you can determine whether or not you are vulnerable. This tool can be found here
