High 7.0Published May 14, 2026

CVE-2025-62628Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in arbitrary code execution.

Updated under an hour ago (Oct 27, 2026, 9:40 AM ET)

Does this affect you?

It affects AMD AIM-T Manageability Service and 5 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for AMD AIM-T Manageability Service

Exploited in the last 30 days

Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in arbitrary code execution.

CVSS: 7.0 HIGH (v4.0, CNA)CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Weakness (CWE): CWE-427
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: AMD
NVD analysis: Awaiting Analysis
Record last updated: May 14, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

AMD AIM-T Manageability Service amd:aim_t_manageability_service (from the name)	AIM-T Manageability Service 5.1.0.1382 not affected	CNA record
AMD AMD Cloud Manageability Service (ACMS) amd:cloud_manageability_service_acms (from the name)	AMD Cloud Manageability Service (ACMS) 2.0.0.295 not affected	CNA record
AMD AMD Management Plug-In for SCCM amd:management_plug_in_for_sccm (from the name)	AMD Management Plug-In for SCCM 8.0.0.1411 not affected	CNA record
AMD AMD Management Console (AMC) amd:management_console_amc (from the name)	AMD Management Console (AMC) 12.0.0.1378 not affected	CNA record
AMD AMD Manageability API amd:manageability_api (from the name)	AMD Manageability API 8.0.0.346 not affected	CNA record
AMD DASH CLI - Command Line Application amd:dash_cli_command_line_application (from the name)	DASH CLI - Command Line Application 8.0.0.318 not affected	CNA record

References

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-9024.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.