6.3
Moyenne
CVE-2025-62619 Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the…
Description
Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the exposed URL to retrieve sensitive keys, potentially leading to loss of confidentiality.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics | Versions non publiées | |
| AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics | Versions non publiées | |
| AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics | Versions non publiées | |
| AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics | Versions non publiées | |
| AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics | Versions non publiées | |
| AMD Ryzen™ 7000 Series Desktop Processors | Versions non publiées | |
| AMD Ryzen™ 3000 Series Desktop Processors | Versions non publiées | |
| AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors | Versions non publiées | |
| AMD Ryzen™ 7030 Series Mobile processors with Radeon™ Graphics | Versions non publiées |
Afficher les 17 autres branches Masquer les 17 autres branches
Références
- www.amd.com www.amd.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
Les 54 CVE de AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics →
CVE-2026-43603
A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of…
6.9
Moyenne
CVE-2023-20577
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI…
7.4
Élevée
CVE-2023-20572
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against…
5.6
Moyenne
CVE-2021-46747
Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user…
7.1
Élevée