Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2025-62625

Summary
Assigner-AMD
Assigner Org ID-b58fc414-a1e4-4f92-9d70-1add41838648
Published At-14 May, 2026 | 14:31
Updated At-14 May, 2026 | 15:35
Rejected At-
Credits

Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sensitive keys, potentially resulting in unauthorized access to privileged resources and loss of confidentiality.

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
▼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:AMD
Assigner Org ID:b58fc414-a1e4-4f92-9d70-1add41838648
Published At:14 May, 2026 | 14:31
Updated At:14 May, 2026 | 15:35
Rejected At:
▼CVE Numbering Authority (CNA)

Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sensitive keys, potentially resulting in unauthorized access to privileged resources and loss of confidentiality.

Affected Products
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ 7000 Series Desktop Processors
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ 3000 Series Desktop Processors
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ Threadripper™ 3000 Processors
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ 9000HX Series Processors
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ AI 300 Series Processors
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ 7000 Series Desktop Processors
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ 7000 Series Desktop Processors
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ 8000 Series Desktop Processors
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ 8000 Series Desktop Processors
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ 9000 Series Desktop Processors
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ 4000 Series Desktop Processors
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ 5000 Series Desktop Processors
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ 3000 Series Desktop Processors
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ 5000 Series Desktop Processors
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ AI Max 300 Series Processors
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ Threadripper™ 7000 Processors
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
Not public
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ Threadripper™ 9000 Processors
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Ryzen™ Threadripper™ PRO 9000 WX-Series Processors
Default Status
affected
Versions
Unaffected
  • AMD Device Management Portal 3.0.0.895
Vendor
Advanced Micro Devices, Inc.AMD
Product
AMD Device Management Portal (ADMP)
Default Status
affected
Versions
Unaffected
  • 3.0.0.895
Problem Types
TypeCWE IDDescription
CWECWE-269CWE-269 Privilege Escalation
Type: CWE
CWE ID: CWE-269
Description: CWE-269 Privilege Escalation
Metrics
VersionBase scoreBase severityVector
4.06.0MEDIUM
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Version: 4.0
Base score: 6.0
Base severity: MEDIUM
Vector:
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-9023.html
N/A
Hyperlink: https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-9023.html
Resource: N/A
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
Information is not available yet
▼National Vulnerability Database (NVD)
nvd.nist.gov
Source:psirt@amd.com
Published At:14 May, 2026 | 15:16
Updated At:14 May, 2026 | 15:53

Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sensitive keys, potentially resulting in unauthorized access to privileged resources and loss of confidentiality.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary4.06.0MEDIUM
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Type: Secondary
Version: 4.0
Base score: 6.0
Base severity: MEDIUM
Vector:
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CPE Matches

Weaknesses
CWE IDTypeSource
CWE-269Secondarypsirt@amd.com
CWE ID: CWE-269
Type: Secondary
Source: psirt@amd.com
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-9023.htmlpsirt@amd.com
N/A
Hyperlink: https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-9023.html
Source: psirt@amd.com
Resource: N/A

Change History

0
Information is not available yet

Similar CVEs

4Records found

CVE-2023-20563
Matching Score-6
Assigner-Advanced Micro Devices Inc.
ShareView Details
Matching Score-6
Assigner-Advanced Micro Devices Inc.
CVSS Score-7.8||HIGH
EPSS-0.14% / 34.28%
||
7 Day CHG~0.00%
Published-14 Nov, 2023 | 18:54
Updated-22 Oct, 2024 | 14:35
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.

Action-Not Available
Vendor-Advanced Micro Devices, Inc.
Product-ryzen_9_pro_7940hs_firmwareryzen_5_6600h_firmwareryzen_9_pro_7940h_firmwareryzen_7_7800x3d_firmwareryzen_5_pro_7640hs_firmwareryzen_7_7735hs_firmwareryzen_9_6900hx_firmwareryzen_9_5980hxryzen_7_pro_7730uryzen_7_5800hsryzen_3_pro_7330uryzen_5_5500hryzen_5_5600hsryzen_3_5300geryzen_7_5825uryzen_7_5825u_firmwareryzen_5_6600hryzen_9_6980hxryzen_5_5560uryzen_9_7950xryzen_5_pro_7640uryzen_pro_7745ryzen_9_7900xryzen_7_7700xryzen_5_6600hsryzen_9_5900hsryzen_5_pro_7545u_firmwareryzen_7_7700x_firmwareryzen_7_5700gryzen_9_5980hsryzen_3_pro_7440u_firmwareryzen_3_5125c_firmwareryzen_9_6900hxryzen_5_7600ryzen_7_5800h_firmwareryzen_pro_7745_firmwareryzen_9_6900hsryzen_pro_7945_firmwareryzen_pro_7945ryzen_5_5500ryzen_7_pro_7840u_firmwareryzen_3_5400uryzen_pro_3900_firmwareryzen_7_7700_firmwareryzen_9_5980hs_firmwareryzen_7_7735uryzen_3_5300gryzen_5_7600x_firmwareryzen_7_6800h_firmwareryzen_7_6800u_firmwareryzen_5_5600ge_firmwareryzen_5_pro_7530uryzen_5_5600hs_firmwareryzen_5_5600h_firmwareryzen_7_pro_7840h_firmwareryzen_7_5700ryzen_9_6900hs_firmwareryzen_3_5400u_firmwareryzen_5_pro_7640u_firmwareryzen_7_6800hs_firmwareryzen_7_pro_7840uryzen_5_7535uryzen_7_7800x3dryzen_9_7900x3d_firmwareryzen_5_5500_firmwareryzen_5_pro_7640hsryzen_5_pro_7640h_firmwareryzen_5_5600hryzen_7_6800hsryzen_5_7535u_firmwareryzen_5_pro_7640hryzen_7_6800uryzen_7_7736uryzen_5_5600gryzen_3_5425u_firmwareryzen_7_7735hsryzen_9_7900x3dryzen_5_5600uryzen_9_pro_7940hryzen_5_pro_7540u_firmwareryzen_pro_7645_firmwareryzen_9_5900hx_firmwareryzen_pro_3900ryzen_5_5600geryzen_9_7900_firmwareryzen_5_7600xryzen_3_5300ge_firmwareryzen_5_5625uryzen_5_6600uryzen_9_6980hs_firmwareryzen_7_5700geryzen_3_pro_7440uryzen_7_pro_7840hryzen_3_5125cryzen_9_6980hx_firmwareryzen_7_7735u_firmwareryzen_9_5900hs_firmwareryzen_5_5600u_firmwareryzen_pro_7645ryzen_5_6600u_firmwareryzen_3_7335uryzen_7_5700g_firmwareryzen_5_7535hs_firmwareryzen_7_5700_firmwareryzen_5_7600_firmwareryzen_7_pro_7840hs_firmwareryzen_7_pro_7840hsryzen_5_7500f_firmwareryzen_5_7535hsryzen_3_5300g_firmwareryzen_5_7500fryzen_7_5800u_firmwareryzen_9_pro_7940hsryzen_7_7736u_firmwareryzen_5_6600hs_firmwareryzen_3_pro_7330u_firmwareryzen_3_5425uryzen_5_pro_7540uryzen_5_5560u_firmwareryzen_3_5100_firmwareryzen_9_5980hx_firmwareryzen_7_5800uryzen_9_5900hxryzen_9_7950x3d_firmwareryzen_5_5600g_firmwareryzen_9_7950x3dryzen_7_7700ryzen_5_5500h_firmwareryzen_5_pro_7545uryzen_3_5100ryzen_7_5800hryzen_7_pro_7730u_firmwareryzen_9_7900ryzen_9_7950x_firmwareryzen_5_pro_7530u_firmwareryzen_7_5800hs_firmwareryzen_5_5625u_firmwareryzen_3_7335u_firmwareryzen_7_5700ge_firmwareryzen_9_6980hsryzen_7_6800hryzen_9_7900x_firmwareAMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt"Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics “Phoenix” FP7/FP7r2/FP8Ryzen™ 7000 Series Desktop Processors “Raphael” XD3AMD Ryzen™ Embedded R1000AMD Ryzen™ Embedded R2000AMD Ryzen™ Embedded 5000Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne”AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R”AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo”AMD Ryzen™ Embedded V3000Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R”ryzen_6000_series_processors_with_radeon_graphicsryzen_embedded_r2000ryzen_5000_series_desktop_processors_with_radeon_graphicsryzen_7000_series_desktop_processorsryzen_7035_series_processors_with_radeon_graphicsryzen_5000_series_mobile_processors_with_radeon_graphicsryzen_7030_series_mobile_processors_with_radeon_graphicsryzen_embedded_5000ryzen_embedded_r1000ryzen_embedded_v3000ryzen_5000_series_processors_with_radeon_graphicsryzen_7040_series_mobile_processors_with_radeon_graphics
CWE ID-CWE-269
Improper Privilege Management
CVE-2023-20598
Matching Score-6
Assigner-Advanced Micro Devices Inc.
ShareView Details
Matching Score-6
Assigner-Advanced Micro Devices Inc.
CVSS Score-7.8||HIGH
EPSS-1.91% / 83.45%
||
7 Day CHG~0.00%
Published-17 Oct, 2023 | 13:26
Updated-02 Aug, 2024 | 09:05
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution.

Action-Not Available
Vendor-Advanced Micro Devices, Inc.
Product-ryzen_9_7845hxradeon_pro_w7600ryzen_7_6800hsradeon_rx_6600ryzen_7_6800uryzen_5_7645hxryzen_9_7945hxryzen_7_7736uradeon_rx_6900_xtryzen_7_7840uradeon_rx_7900mradeon_rx_7900_xtradeon_rx_5300ryzen_7_7735hsryzen_9_7900x3dradeon_pro_w6400radeon_rx_5500radeon_rx_7900_greradeon_pro_w5700radeon_rx_6550mradeon_rx_5300_xtryzen_5_7600xryzen_5_6600uradeon_rx_7800_xtradeon_rx_6700sradeon_rx_6600_xtradeon_rx_6650_xtryzen_5_6600hradeon_rx_5700mryzen_9_6980hxradeon_rx_6750_gre_10gbradeon_pro_w6600ryzen_9_7940hradeon_rx_5700ryzen_9_7950xryzen_5_7540uradeon_rx_5700_xtradeon_rx_6800_xtradeon_pro_w7500radeon_rx_7600mryzen_3_7335uradeon_rx_5500mryzen_7_pro_7840hsryzen_9_7900xradeon_pro_w7900ryzen_7_7700xryzen_5_6600hsryzen_7_7840hryzen_5_7640uradeon_rx_6500_xtradeon_rx_5300mradeon_pro_w6800radeon_rx_6600mradeon_rx_6550sryzen_5_7535hsryzen_9_7945hx3dradeon_rx_6750_gre_12gbradeon_rx_6950_xtradeon_rx_6750_xtryzen_5_7500fradeon_rx_5500_xtryzen_9_6900hxryzen_9_pro_7940hsradeon_pro_w7800ryzen_5_7600ryzen_9_6900hsradeon_rx_7700sryzen_5_7640hradeon_rx_6300mradeon_rx_7600radeon_rx_6450mradeon_rx_5600mryzen_3_7440uradeon_softwareradeon_rx_6700radeon_pro_w6300radeon_rx_6400radeon_rx_6650mradeon_rx_6650m_xtradeon_rx_6700_xtradeon_rx_6800ryzen_5_pro_7645radeon_rx_6700mryzen_7_7735uradeon_pro_w5500ryzen_9_7950x3dryzen_9_pro_7945ryzen_3_7320uryzen_7_7700radeon_rx_5600ryzen_7_pro_7745ryzen_5_7520uradeon_rx_5600_xtryzen_7_7745hxradeon_rx_7600sradeon_rx_7600m_xtryzen_9_7900radeon_rx_6600sradeon_rx_7700_xtryzen_5_7535uradeon_rx_7900_xtxradeon_rx_6800sryzen_7_7800x3dradeon_rx_6500mryzen_9_6980hsryzen_5_pro_7640hsryzen_7_6800hRyzen™ 7035 Series Processors with Radeon™ GraphicsRadeon™ PRO W5000 Series Graphics CardsRyzen™ 7000 Series Processors with Radeon™ GraphicsRadeon™ PRO W7000 Series Graphics CardsRadeon™ RX 6000 Series Graphics CardsRadeon™ RX 7000 Series Graphics CardsRyzen™ 7040 Series Processors with Radeon™ GraphicsRadeon™ RX 5000 Series Graphics CardsRadeon™ PRO W6000 Series Graphics CardsRyzen™ 6000 Series Processors with Radeon™ Graphics Ryzen™ 7020 Series Processors with Radeon™ GraphicsRyzen™ 7045 Series Processors with Radeon™ Graphicsryzen_9_pro_7945radeon_rx_5300_xtryzen_5_7645hx
CWE ID-CWE-269
Improper Privilege Management
CVE-2023-20565
Matching Score-6
Assigner-Advanced Micro Devices Inc.
ShareView Details
Matching Score-6
Assigner-Advanced Micro Devices Inc.
CVSS Score-7.8||HIGH
EPSS-0.14% / 34.28%
||
7 Day CHG~0.00%
Published-14 Nov, 2023 | 18:54
Updated-02 Aug, 2024 | 09:05
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.

Action-Not Available
Vendor-Advanced Micro Devices, Inc.
Product-ryzen_9_pro_7940hs_firmwareryzen_5_6600h_firmwareryzen_9_pro_7940h_firmwareryzen_7_7800x3d_firmwareryzen_5_pro_7640hs_firmwareryzen_7_7735hs_firmwareryzen_9_6900hx_firmwareryzen_9_5980hxryzen_7_pro_7730uryzen_7_5800hsryzen_3_pro_7330uryzen_5_5500hryzen_5_5600hsryzen_3_5300geryzen_7_5825uryzen_7_5825u_firmwareryzen_5_6600hryzen_9_6980hxryzen_5_5560uryzen_9_7950xryzen_5_pro_7640uryzen_pro_7745ryzen_9_7900xryzen_7_7700xryzen_5_6600hsryzen_9_5900hsryzen_5_pro_7545u_firmwareryzen_7_7700x_firmwareryzen_7_5700gryzen_9_5980hsryzen_3_pro_7440u_firmwareryzen_3_5125c_firmwareryzen_9_6900hxryzen_5_7600ryzen_7_5800h_firmwareryzen_pro_7745_firmwareryzen_9_6900hsryzen_pro_7945_firmwareryzen_pro_7945ryzen_5_5500ryzen_7_pro_7840u_firmwareryzen_3_5400uryzen_pro_3900_firmwareryzen_7_7700_firmwareryzen_9_5980hs_firmwareryzen_7_7735uryzen_3_5300gryzen_5_7600x_firmwareryzen_7_6800h_firmwareryzen_7_6800u_firmwareryzen_5_5600ge_firmwareryzen_5_pro_7530uryzen_5_5600hs_firmwareryzen_5_5600h_firmwareryzen_7_pro_7840h_firmwareryzen_7_5700ryzen_9_6900hs_firmwareryzen_3_5400u_firmwareryzen_5_pro_7640u_firmwareryzen_7_6800hs_firmwareryzen_7_pro_7840uryzen_5_7535uryzen_7_7800x3dryzen_9_7900x3d_firmwareryzen_5_5500_firmwareryzen_5_pro_7640hsryzen_5_pro_7640h_firmwareryzen_5_5600hryzen_7_6800hsryzen_5_7535u_firmwareryzen_5_pro_7640hryzen_7_6800uryzen_7_7736uryzen_5_5600gryzen_3_5425u_firmwareryzen_7_7735hsryzen_9_7900x3dryzen_5_5600uryzen_9_pro_7940hryzen_5_pro_7540u_firmwareryzen_pro_7645_firmwareryzen_9_5900hx_firmwareryzen_pro_3900ryzen_5_5600geryzen_9_7900_firmwareryzen_5_7600xryzen_3_5300ge_firmwareryzen_5_5625uryzen_5_6600uryzen_9_6980hs_firmwareryzen_7_5700geryzen_3_pro_7440uryzen_7_pro_7840hryzen_3_5125cryzen_9_6980hx_firmwareryzen_7_7735u_firmwareryzen_9_5900hs_firmwareryzen_5_5600u_firmwareryzen_pro_7645ryzen_5_6600u_firmwareryzen_3_7335uryzen_7_5700g_firmwareryzen_5_7535hs_firmwareryzen_7_5700_firmwareryzen_5_7600_firmwareryzen_7_pro_7840hs_firmwareryzen_7_pro_7840hsryzen_5_7500f_firmwareryzen_5_7535hsryzen_3_5300g_firmwareryzen_5_7500fryzen_7_5800u_firmwareryzen_9_pro_7940hsryzen_7_7736u_firmwareryzen_5_6600hs_firmwareryzen_3_pro_7330u_firmwareryzen_3_5425uryzen_5_pro_7540uryzen_5_5560u_firmwareryzen_3_5100_firmwareryzen_9_5980hx_firmwareryzen_7_5800uryzen_9_5900hxryzen_9_7950x3d_firmwareryzen_5_5600g_firmwareryzen_9_7950x3dryzen_7_7700ryzen_5_5500h_firmwareryzen_5_pro_7545uryzen_3_5100ryzen_7_5800hryzen_7_pro_7730u_firmwareryzen_9_7900ryzen_9_7950x_firmwareryzen_5_pro_7530u_firmwareryzen_7_5800hs_firmwareryzen_5_5625u_firmwareryzen_3_7335u_firmwareryzen_7_5700ge_firmwareryzen_9_6980hsryzen_7_6800hryzen_9_7900x_firmwareAMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt"AMD Ryzen™ Embedded V3000Ryzen™ 7000 Series Desktop Processors “Raphael” XD3AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R”AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo”Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R” Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics “Phoenix” FP7/FP7r2/FP8
CWE ID-CWE-269
Improper Privilege Management
CVE-2024-21966
Matching Score-6
Assigner-Advanced Micro Devices Inc.
ShareView Details
Matching Score-6
Assigner-Advanced Micro Devices Inc.
CVSS Score-7.3||HIGH
EPSS-0.04% / 10.78%
||
7 Day CHG~0.00%
Published-11 Feb, 2025 | 19:56
Updated-15 Apr, 2026 | 00:35
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

A DLL hijacking vulnerability in the AMD Ryzen™ Master Utility could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.

Action-Not Available
Vendor-Advanced Micro Devices, Inc.
Product-AMD Ryzen™ Master Utility
CWE ID-CWE-269
Improper Privilege Management
Details not found