News for hackers. Stuff that matters.

A comment on Rediscovering the Intel AMT Vulnerability.

Re:Rediscovering the Intel AMT Vulnerability by thyrsus on Friday May 05, 2017 @02:59PM (#14275952)
The article says that a Local Management Service (LMS) must be installed for the bug to be demonstrated[0], and describes a Windows package that provides that. Is there a Linux equivalent?

[0] I say "demonstrated" instead of "exploited", since I don't understand the details sufficiently to rule out exploitation in the absence of LMS.

[ Parent | on HN ]
Re:Rediscovering the Intel AMT Vulnerability by anoother on Friday May 05, 2017 @03:23PM (#14276123)
Yes, there is.

I haven't looked into the exploit, but if the attack uses AMT's http(s) interface, you could also simply access the AMT port(s) from a remote machine. The service simply allows one to speak to the local ME.

[ Parent | on HN ]