Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2025-62628

Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in arbitrary code execution

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in arbitrary code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AIM-T Manageability Service

Default version status: affected

  • AIM-T Manageability Service 5.1.0.1382unaffected

AMD AMD Cloud Manageability Service (ACMS)

Default version status: affected

  • AMD Cloud Manageability Service (ACMS) 2.0.0.295unaffected

AMD AMD Management Plug-In for SCCM

Default version status: affected

  • AMD Management Plug-In for SCCM 8.0.0.1411unaffected

AMD AMD Management Console (AMC)

Default version status: affected

  • AMD Management Console (AMC) 12.0.0.1378unaffected

AMD AMD Manageability API

Default version status: affected

  • AMD Manageability API 8.0.0.346unaffected

AMD DASH CLI - Command Line Application

Default version status: affected

  • DASH CLI - Command Line Application 8.0.0.318unaffected

References