>CVE-2018-3628, Intel says that exploitation is possible only from the same subnet

So if I understand correctly, at the moment, these CPUs are vulnerable on a local network but not currently over the internet?

Fortunately then various groups have already been working to remove and nullify as much of ME as possible.