Not that anyone is surprised or even cares but two more severe bugs have been found in the Intel Management Engine firmware. They allow remote execution with full privileges:
https://nvd.nist.gov/vuln/detail/CVE-2018-3627
https://nvd.nist.gov/vuln/detail/CVE-2018-3628
An article about these vulnerabilities on Tech Republic provides summaries and lists the affected processors.
(Score: 4, Insightful) by DannyB on Tuesday July 31 2018, @04:45PM
Even much more better is if the remote management can be done when the user has "turned off" the computer.
If you eat an entire cake without cutting it, you technically only had one piece.