Yup. There's also rumours it holds the secure enclave equivalent, so getting root into this means you're double fucked:

https://twitter.com/mjg59/status/932730696614813696

Given Intel's announcement: https://security-center.intel.com/advisory.aspx?intelid=INTE...

>Based on the items identified through the comprehensive security review, an attacker could gain unauthorized access to platform, Intel® ME feature, and 3rd party secrets protected by the Intel® Management Engine (ME), Intel® Server Platform Service (SPS), or Intel® Trusted Execution Engine (TXE).

It seems like there's a reasonable chance of that being the case.

Link to Intel's announcement isn't working. Might be a server-side issue ¯\_(ツ)_/¯

Apparently it needs to have appended &languageid=en-fr to work [1]

[1] https://security-center.intel.com/advisory.aspx?intelid=INTE...