None of the passwords gets reset after anu update. You actually need the password to update anyway. And anyone deploying AMT enabled workstations (or even non-AMT ones) should pro isi on them properly: disable or configure AMT and change the password, disable the MEBx setup dialog, password the BIOS. I've set up provisioning infrastructures for AMT enabled devices since 2008-2009 and they were used to configure tens if not hundreds of thousands of devices. None of them is open for this kind of exploit. Unlike the previous ones where Intel'crappy security was to blame, this time it's crappy system administration. Like complaining that Windows sucks because you have 123456 as administrator password.
What's really scary though is that people with limited understanding of how this works are allowed to write titles like in this article.
F-Secure's security researchers discovered another flaw in Intel's Active Management Technology (AMT) that a hacker can potentially misuse to gain remote access to a system.
Deutsch
English
Español
Français
Italiano
Nederlands
Polski
Português
Русский
Türkçe
Svenska
Chinese
Magyar