7.7
Élevée
CVE-2026-40677 The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle…
Description
The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| AMD Management Console (AMC) 14.0 | premières → < 14.0.0 | 14.0.0 |
| AMD Ryzen™ Master 2.14 | premières → < 2.14.3 | 2.14.3 |
| AMD μProf 5.3 | premières → < 5.3 | 5.3 |