CVE-2025-62628: Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in arbitrary code… | LiveThreat CVE Feed — Verisq

Login Request a demo

High severity · published May 14, 2026

CVE-2025-62628

Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in arbitrary code…

7.0

CVSS

0.1%

EPSS

No

On KEV

Description

Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in arbitrary code execution.

Exploitation

Is it being used?

Exploit prediction (EPSS)0.1% · higher than 1% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

AM

AIM-T Manageability Service · AMD

All versions, or not specified · source: vendor

AC

AMD Cloud Manageability Service (ACMS) · AMD

All versions, or not specified · source: vendor

AM

AMD Manageability API · AMD

All versions, or not specified · source: vendor

AM

AMD Management Console (AMC) · AMD

All versions, or not specified · source: vendor

AM

AMD Management Plug-In for SCCM · AMD

All versions, or not specified · source: vendor

DC

DASH CLI - Command Line Application · AMD

All versions, or not specified · source: vendor

Affected product

AM

AIM-T Manageability Service

AMD

All AIM-T Manageability Service CVEs

References

https://nvd.nist.gov/vuln/detail/CVE-2025-62628

https://www.cve.org/CVERecord?id=CVE-2025-62628

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-9024.html

More from AIM-T Manageability Service

7.3

Unquoted search path within AIM-T Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrary code execution