So if I point another computer on the network to the given ports on a browser, I should see this damn interface? Would be a nice way to indicate whether it is on or not, maybe?
$ curl -v http://server:16992
> GET / HTTP/1.1
> Host: server:16992
> User-Agent: curl/7.47.0
> Accept: /
>
< HTTP/1.1 303 See Other
< Location: /logon.htm
< Content-Length: 0
< Server: Intel(R) Active Management Technology 8.1.10
This shit is never clear, but did I have to actively turn this thing on to be vulnerable to the remote variant of this attack?