Disable Intel AMT to prevent CVE-2017-5689

On 02 May 2017, Embedi discovered "an escalation of privilege vulnerability in Intel® Active Management Technology (AMT), Intel® Standard Manageability (ISM), and Intel® Small Business Technology versions firmware versions 6.x, 7.x, 8.x 9.x, 10.x, 11.0, 11.5, and 11.6 that can allow an unprivileged attacker to gain control of the manageability features provided by these products". The technically paper can be found here https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf.

Okay and now (since there is no update yet?). Here is a workaround created by the community. It's called Disable Intel AMT.

Research:
https://mattermedia.com/blog/disabling-intel-amt/

I hope this helps some people here.