CVEvulnerability
CVE-2022-25899
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2022-08-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-276
Description
Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
Affected configurations
• intel open active management technology cloud toolkit (< 2.0.2)
• intel open active management technology cloud toolkit (>= 2.2.0 < 2.2.2)
Related
Weakness · CWE (1)
- CWE-276 Incorrect Default Permissions weakness
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00694.html Patch, Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00694.html Patch, Vendor Advisory