[tyingq]

There is also a local, non root user exploit to provision AMT described in Intel's announcement.

[ppoint]

Yes. To be honest, Intel's announcement was a little dry, lacking details.