CVE-2022-25899 - Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access

Back Back to CVE browser

CRITICAL

Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access

Published Aug 18, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 1.14%

Description

Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Affected products

Vendor n/a Product Intel(R) Default
n/a
- Version
  before versions 2.0.2 and 2.2.2
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Intel(R)

n/a

Version	Status	Constraints
before versions 2.0.2 and 2.2.2	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-276

Incorrect Default Permissions

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-30494
Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00694.html
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-30494		Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00694.html		x_refsource_MISCPatchVendor Advisory