[spash]

Though not a simple remote attack in that sense, AMT has been used by rootkits before:

https://en.wikipedia.org/wiki/Intel_Active_Management_Techno...

A nice overview of what AMT and ME is capable of (and has been for the past decade) can be found in libreboot FAQ:

https://libreboot.org/faq/#intel