Back to Database
Status published
High
CVE-2025-62628
Unsafe OpenSSL initialization within some AMD optional tools may allow...
Vulnerability Description
Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in arbitrary code execution.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-62628
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Reported through AMD Bug Bounty Program
More from AMD
View All →CVE-2025-66664
Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC...
Medium
4.6
CVE-2025-66660
Insufficient parameter sanitization in TEE SOC Driver could allow an...
Low
1.8
CVE-2025-62627
An untrusted pointer dereference in the ionic cloud driver for...
High
7.2
CVE-2025-62626
Improper handling of insufficient entropy in the AMD CPUs could...
High
7.2
CVE-2025-62625
Improper privilege management in the KVM key download component could...
Medium
6
Affected Vendor
Affected Software
AIM-T Manageability Service, AMD Cloud Manageability Service (ACMS), AMD Management Plug-In for SCCM, AMD Management Console (AMC), AMD Manageability API, DASH CLI - Command Line Application
Vulnerable Versions:
AIM-T Manageability Service 5.1.0.1382, AMD Cloud Manageability Service (ACMS) 2.0.0.295, AMD Management Plug-In for SCCM 8.0.0.1411, AMD Management Console (AMC) 12.0.0.1378, AMD Manageability API 8.0.0.346, DASH CLI - Command Line Application 8.0.0.318
Timeline
Official Publish:
May 14th, 2026
Last Modified:
May 15th, 2026
Added to House:
July 22nd, 2026