A critical vulnerability in Intel chips discovered nearly a decade ago allows hackers to gain complete control of affected Windows computers without requiring a password.
The vulnerability, which was disclosed by Intel and rated critical last week, lies in Intel's Active Management feature (better known as AMT), which allows administrators to perform remote maintenance on computers. 
AMT also allows the administrator to remotely control the computer's keyboard and mouse, even if the computer is turned off.
AMT is also accessible through the browser even when the remote computer is in sleep mode. It is protected by a password set by the administrator.
The problem is that a hacker can enter a blank password and gain full privileges to the web console, according to independent technical analyses by two security research labs.
Embedi researchers, who found the bug, explained in a white paper published on Friday that the flaw exists because the default “admin” account for the web interface can log in without the user’s passwords.
Intel has not yet said how many systems are affected.
However, a search on Shodan, the search engine for open ports and databases, shows that more than 8,500 devices are currently vulnerable, with 3,000 in the US alone. But there could be thousands more devices at risk on internal networks.
In a statement, Intel said it is working with its partners to address the issue and "expects that the team will make updates available beginning the week of May 8.".
So far, Dell, Fujitsu, HP, and Lenovo have issued security advisories with instructions on when to patch the vulnerability. Consumer devices are not affected by the bug.
Intel has also published a detection tool to determine if your systems are affected.
