Garrett said if an exploit allows unsigned data to be installed and interpreted by the ME, an attacker could effectively trigger the reinfection of malware after every ME reboot. That probably means your Bitlocker keys are compromised, but it also means all your remote attestation credentials are toast.' If you're using PTT and someone compromises your ME, the TPM is no longer trustworthy. He explained, 'PTT is Intel's 'Run a TPM in software on the ME' feature. It has its own CPU and its own operating system – recently, an x86 Quark core and MINIX – that has complete control over the machine, and it functions below and out of sight of the installed operating system and any hypervisors or antivirus tools present. The Management Engine is a barely documented black box. It has been assailed as a 'backdoor' – a term Intel emphatically rejects – and it is a mechanism targeted by researchers at UK-based Positive Technologies, who are set to reveal in detail new ways to exploit the ME next month. It is Chipzilla's much maligned coprocessor at the center of its vPro suite of features, and it is present in various chip families. Intel's Management Engine, at the heart of today's disclosures, is a computer within your computer. Intel Xeon E3-1200 v5 and v6 processors.6th, 7th and 8th Generation Intel Core processors.

The processor chipsets affected by the flaws are as follows: In short, a huge amount of Intel silicon is secretly running code that is buggy and exploitable by attackers and malware to fully and silently compromise computers.

Intel management engine firmware