{"id":"CVE-2022-25899","aliases":["EUVD-2022-30494","GHSA-pf6r-c2f8-xcp4"],"status":"published","title":"Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before...","description":"Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01203,"percentile":0.68459,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-276","CWE-863"],"published":"2022-08-18T19:58:14Z","modified":"2026-10-24T10:30:52Z","products":[{"vendor":"intel","product":"open_active_management_technology_cloud_toolkit"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00694.html","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25899"},{"url":"https://github.com/advisories/GHSA-pf6r-c2f8-xcp4"}],"sources":{"cve":[{"id":"CVE-2022-25899","description":"Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access.","status":"published","published":"2022-08-18T19:58:14Z","modified":"2025-02-25T17:17:23.102Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:34:28.707644Z"}],"euvd":[{"id":"EUVD-2022-30494","description":"Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access.","status":"published","published":"2022-08-18T19:58:14Z","modified":"2025-02-25T17:17:23Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:53:24.103419Z"}],"ghsa":[{"id":"GHSA-pf6r-c2f8-xcp4","title":"Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before...","description":"Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access.","status":"published","published":"2022-08-19T00:00:18Z","modified":"2025-02-25T18:31:08Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-276","CWE-863"],"updated_at":"2026-11-02T15:00:02.356908Z"}],"nvd":[{"id":"CVE-2022-25899","description":"Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access.","status":"published","published":"2022-08-18T20:15:10.737Z","modified":"2026-06-17T04:34:27.93Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:07:25.242752Z"}],"osv":[{"id":"CVE-2022-25899","description":"Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access.","status":"published","published":"2022-08-18T20:15:10.737Z","modified":"2026-10-24T10:30:52.297875525Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:24.758293Z"}]}}