Skip to content
OpenAdvisories
High · 7.0 CVE-2025-62628 EUVD-2025-209847GHSA-346w-gjpw-jf9r

Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentia…

Published May 14, 2026 · Updated May 15, 2026 · Assigned by AMD

Vendor: AMD Product: AIM-T Manageability Service Product: AMD Cloud Manageability Service (ACMS) Product: AMD Manageability API Product: AMD Management Console (AMC) Product: AMD Management Plug-In for SCCM Product: DASH CLI - Command Line Application

Description

Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in arbitrary code execution.

Affected products

VendorProductAffectedFixed
AMD AIM-T Manageability Service — AIM-T Manageability Service 5.1.0.1382
AMD AMD Cloud Manageability Service (ACMS) — AMD Cloud Manageability Service (ACMS) 2.0.0.295
AMD AMD Management Plug-In for SCCM — AMD Management Plug-In for SCCM 8.0.0.1411
AMD AMD Management Console (AMC) — AMD Management Console (AMC) 12.0.0.1378
AMD AMD Manageability API — AMD Manageability API 8.0.0.346
AMD DASH CLI - Command Line Application — DASH CLI - Command Line Application 8.0.0.318

References