PT-2022-4355 · Intel · Open Amt Cloud Toolkit

Matt Primrose · Published 2022-08-09 · Updated 2025-12-04 · CVE-2022-25899

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Open AMT Cloud Toolkit versions prior to 2.0.2 Open AMT Cloud Toolkit versions prior to 2.2.2

Description The issue is related to an authentication bypass in the Open AMT Cloud Toolkit software. This could potentially allow an unauthenticated user to escalate privileges via network access. The vulnerability is associated with weaknesses in the authentication procedure, which can be exploited by a remote attacker to gain elevated privileges.

Recommendations For versions prior to 2.0.2, update to version 2.0.2 or later to resolve the issue. For versions prior to 2.2.2, update to version 2.2.2 or later to resolve the issue.

Fix

Improper Authentication

Incorrect Default Permissions

Weakness Enumeration

CWE-287

CWE-276

Related Identifiers

BDU:2022-05215

CVE-2022-25899

Affected Products

Open Amt Cloud Toolkit

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2022-25899 · Security Note
• https://osv.dev/vulnerability/CVE-2022-25899 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00694.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-05215 · Security Note
• https://twitter.com/dailycve/status/1996658056437067975 · Twitter Post
• http://intel.com/content/www/us/en/security-center/advisory/intel-sa-00694.html · Note
• https://t.me/cvenotify/112441 · Telegram Post