CVE-2022-25899

CRITICAL 9.8CVE-2022-25899 · Published 18/08/2022 · updated 17/06/2026

In short

CVE-2022-25899 is a CRITICAL (CVSS 9.8) vulnerability affecting open active management technology cloud toolkit (intel).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 68.3% of all vulnerabilities.
Fix: update to 2.2.2, 2.0.2 or later.

Package	Affected versions	Patched versions
open active management technology cloud toolkit intel	`≥ 2.2.0, < 2.2.2< 2.0.2`	`2.2.22.0.2`

Description

Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

References

intel.com/content/www/us/en/security-center/advisory/intel-sa-00694.html · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free