SCCM SQL Query to Find Machines Impacted by AMT Firmware Exploit (INTEL-SA-00075)

The following SQL should help identify the state of impacted systems. Please review thoroughly before relying on this information, while I believe the results should be accurate, you should do your own due diligence. Please let me know if you find any errors or have any suggestions to return better data.

More information on INTEL-SA-00075 here.



  1. Hi Chris
    Thanks for sharing this! Using this it took me 3mins instead of 3hrs to get this report to my manager – keep it up!

    • Thanks VW – appreciate the comment and glad it helped!


Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.