There is also a local, non root user exploit to provision AMT described in Intel's announcement.