Intel's zero-day problem

I'm not sure about how intelmetool works but it should be possible to use the MEI interface through /dev/mei to try to open a connection to the AMT application running on the ME and check it's provisioned or not (more or less the same thing as doing a network scan from the outside for AMT tcp ports).