Description (CNA)
Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in arbitrary code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AMD / AIM-T Manageability Service | unaffected AIM-T Manageability Service 5.1.0.1382 |
| AMD / AMD Cloud Manageability Service (ACMS) | unaffected AMD Cloud Manageability Service (ACMS) 2.0.0.295 |
| AMD / AMD Management Plug-In for SCCM | unaffected AMD Management Plug-In for SCCM 8.0.0.1411 |
| AMD / AMD Management Console (AMC) | unaffected AMD Management Console (AMC) 12.0.0.1378 |
| AMD / AMD Manageability API | unaffected AMD Manageability API 8.0.0.346 |
| AMD / DASH CLI - Command Line Application | unaffected DASH CLI - Command Line Application 8.0.0.318 |
CWE
CWE-427
References
ADP enrichment
No English description supplied.
No references supplied.