CVE-2025-62619

Summary

Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the exposed URL to retrieve sensitive keys, potentially leading to loss of confidentiality.

Affected Software

VendorProductVersion RangeStatus
AMDAMD Ryzen™ 4000 Series Mobile Processors with Radeon™ GraphicsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ 7035 Series Processors with Radeon™ GraphicsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Athlon™ 3000 Series Mobile Processors with Radeon™ GraphicsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ 7040 Series Mobile Processors with Radeon™ GraphicsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ 7045 Series Mobile Processors with Radeon™ GraphicsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ 7000 Series Desktop ProcessorsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ 3000 Series Desktop ProcessorsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ Threadripper™ PRO 3000 WX-Series ProcessorsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ 7030 Series Mobile Processors with Radeon™ GraphicsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ Threadripper™ PRO 3000 WX-Series ProcessorsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ Threadripper™ 3000 ProcessorsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ 9000HX Series ProcessorsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ AI 300 Series ProcessorsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ Threadripper™ PRO 5000 WX-Series ProcessorsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ Threadripper™ PRO 7000 WX-Series ProcessorsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ 7000 Series Desktop ProcessorsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ 7000 Series Desktop ProcessorsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ 8000 Series Desktop ProcessorsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ 8000 Series Desktop ProcessorsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ 9000 Series Desktop ProcessorsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ 5000 Series Mobile Processors with Radeon™ GraphicsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ 4000 Series Desktop ProcessorsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ 5000 Series Desktop ProcessorsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ 5000 Series Desktop Processors with Radeon™ GraphicsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ 3000 Series Desktop ProcessorsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ 5000 Series Desktop ProcessorsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ 8040 Series Mobile Processors with Radeon™ GraphicsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ 6000 Series Processors with Radeon™ GraphicsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ AI Max 300 Series ProcessorsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ Threadripper™ PRO 7000 WX-Series ProcessorsAMD Device Management Portal 3.0.0.895unaffected
AMDNot publicAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Ryzen™ Threadripper™ PRO 9000 WX-Series ProcessorsAMD Device Management Portal 3.0.0.895unaffected
AMDAMD Device Management Portal (ADMP)3.0.0.895unaffected

Weaknesses

  • CWE-306: CWE-306 Missing Authentication for Critical Function

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References