CVE-2025-62628: AIM-T Manageability Service (exact versions not specified); +5 more affected products

Affected technology

AIM-T Manageability Service · Exact affected versions not specified by the source
AMD

AMD Cloud Manageability Service (ACMS) · Exact affected versions not specified by the source
AMD

AMD Management Plug-In for SCCM · Exact affected versions not specified by the source
AMD

AMD Management Console (AMC) · Exact affected versions not specified by the source
AMD

AMD Manageability API · Exact affected versions not specified by the source
AMD

DASH CLI - Command Line Application · Exact affected versions not specified by the source
AMD

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · Low privileges required · Passive user interaction

What an attacker can do

A local user-privileged attacker may inject a malicious DLL, potentially resulting in arbitrary code execution. Vendor/CNA’s CVSS 4.0 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high.