Two security searchers from ptsecurity.com ( Maxim Goryachy‏ @h0t_max and Mark Ermolov @markel__ ) have announced:

Game over! We (I and @markel__ ) have obtained fully functional JTAG for Intel CSME via USB DCI. #intelme #jtag #inteldci

With this vulnerability, an attacker with physical access to the computer (USB port) can take control of Intel Management Engine (IntelME), and the whole computer.

What are the attack vectors ? (physical access to the computer required ?)

What computer (and configuration) are affected ?

How to protect and/or mitigate such attacks ?

###== EDIT ==

This attack seems to specifically target Intel CSME (IntelME  / AMT). The same security researchers disclosed a similar vulnerability targeting the main CPU/firmware in April 2017 http://blog.ptsecurity.com/2017/04/intel-and-lenovo-have-restricted-access.html (but this setting as disabled in the UEFI/BIOS firmware by default)

Two security searchers from ptsecurity.com ( Maxim Goryachy‏ @h0t_max and Mark Ermolov @markel__ ) have announced on Twitter:

Game over! We (I and @markel__ ) have obtained fully functional JTAG for Intel CSME via USB DCI. #intelme #jtag #inteldci

With this vulnerability, an attacker with physical access to the computer (USB port) can take control of Intel Management Engine (IntelME), and the whole computer.

• What are the attack vectors? (Physical access to the computer required?)

• What computer (and configuration) are affected?

• How to protect and/or mitigate such attacks?

This attack seems to specifically target Intel CSME (IntelME/AMT). The same security researchers disclosed a similar vulnerability targeting the main CPU/firmware in April 2017 (but this setting as disabled in the UEFI/BIOS firmware by default)

Two security searchers ( Maxim Goryachy‏ @h0t_max and Mark Ermolov @markel__ ) have announced:

Game over! We (I and @markel__ ) have obtained fully functional JTAG for Intel CSME via USB DCI. #intelme #jtag #inteldci

With this vulnerability, an attacker with physical access to the computer (USB port) can take control of Intel Management Engine (IntelME), and the whole computer.

What are the attack vectors ? (physical access to the computer required ?)

What computer (and configuration) are affected ?

How to protect and/or mitigate such attacks ?

Two security searchers from ptsecurity.com ( Maxim Goryachy‏ @h0t_max and Mark Ermolov @markel__ ) have announced:

Game over! We (I and @markel__ ) have obtained fully functional JTAG for Intel CSME via USB DCI. #intelme #jtag #inteldci

With this vulnerability, an attacker with physical access to the computer (USB port) can take control of Intel Management Engine (IntelME), and the whole computer.

What are the attack vectors ? (physical access to the computer required ?)

What computer (and configuration) are affected ?

How to protect and/or mitigate such attacks ?

###== EDIT ==

This attack seems to specifically target Intel CSME (IntelME / AMT). The same security researchers disclosed a similar vulnerability targeting the main CPU/firmware in April 2017 http://blog.ptsecurity.com/2017/04/intel-and-lenovo-have-restricted-access.html (but this setting as disabled in the UEFI/BIOS firmware by default)