INTEL-SA-00075 describes a vulnerability in the Intel AMT/ISM/SBT firmware. From Intels own bulletin this is a threat both locally and remotely.
How is a threat in the local scenario? I understand the threat at the network level, but Intel states, this vulnerability remains a threat at the local level.
From their bulletin:
An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs
I don't understand how this presents a threat. If the service is not provisioned, then there is no threat, and in order to provision the service, a user needs administrative privileges (or needs to have physical access). If a user has admin privileges already then exploiting this buys them nothing (and physical access implies root privileges anyways, ala usb attacks among others). Am I missing something?