CVE-2022-25899

CRITICAL

Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege ...

Affects 1 product across 1 vendor.

CVSS 3.19.8
EPSS1.2%
Percentile67th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-276: Incorrect Default Permissions

Software sets overly permissive default access rights during installation or resource creation.

Related Attack Patterns (CAPEC)
CAPEC-81 Web Server Logs Tampering
via CWE-276
CAPEC-127 Directory Indexing
via CWE-276
CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs
via CWE-276

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

An authentication bypass vulnerability exists in the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2, allowing unauthenticated users to potentially escalate privileges via network access.

BSID: BS-2022-GLOBAL-066466-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2022-25899?
An authentication bypass vulnerability exists in the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2, allowing unauthenticated users to potentially escalate privileges via network access.
What is the CVSS score for CVE-2022-25899?
CVE-2022-25899 has CVSS 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS: 1.2%.
Is CVE-2022-25899 actively exploited?
No confirmed active exploitation of CVE-2022-25899 as of 2026-09-25.
How do I remediate CVE-2022-25899?
Priority: IMMEDIATE. Advisory: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00694.html PSIRT: [email protected]
What systems are affected by CVE-2022-25899?
CVE-2022-25899 affects Intel Open Active Management Technology Cloud Toolkit.
Vulnerability Details
CVE IDCVE-2022-25899
BSIDBS-2022-GLOBAL-066466-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published2022-08-18
Last Modified2026-06-17
ICS Relevance0%
Weakness (CWE)
Incorrect Default Permissions
SourceNVD
Official Description

Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerability is due to improper authentication checks in the Open AMT Cloud Toolkit software, which could be exploited by an attacker to bypass authentication and gain unauthorized access to the system.

Exploitation Likelihood: HIGH

Affected Products
VendorProductAffected Versions
Intel Open Active Management Technology Cloud Toolkit < 2.0.2 ≥ 2.2.0, < 2.2.2
Remediation
View Vendor Advisory →

Remediation Priority: IMMEDIATE

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 1519 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hash6dd8dba9a9f678ba09cc610317bb535e8073a31d0c8033bb37e9784c4c1590f091f9201abd0a30ec9b468a948f49e138cccadbe0808c7c64740c217e839e605e
Related CVEs affecting Intel
CVE-2000-0384 10.0 NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wiz... CVE-2007-1307 10.0 Unspecified vulnerability in Lenovo Intel PRO/1000 LAN adapter before Build 1... CVE-2024-22476 10.0 Improper input validation in some Intel(R) Neural Compressor software before ... CVE-2021-44228 10.0 Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2... CVE-2019-0101 9.8 Authentication bypass in the Intel Unite(R) solution versions 3.2 through 3.3...
View all Intel CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.8 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →