Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-25899

Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Published

2022-08-18T20:15:10.737

Last Modified

2025-02-25T18:15:22.500

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses

Type: Primary
NVD-CWE-noinfo
Type: Secondary
CWE-276

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	intel	open_active_management_technology_cloud_toolkit	< 2.0.2	Yes
Application	intel	open_active_management_technology_cloud_toolkit	< 2.2.2	Yes

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00694.html Patch, Vendor Advisory ([email protected])
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00694.html Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)