Yep I had a work computer that was affected by the Intel null password exploit in 2017. Event logs showed access allowed without password credential supplied, and my camera had been turned on permanently. The camera on/off only toggled the LED state.