Strix
26.1K

CVE-2025-62619

MEDIUMCVSS 6.3/10EPSS 0.32%

Last modified

CVE-2025-62619 is a medium-severity vulnerability rated 6.3/10 on the CVSS scale. Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the exposed URL to retrieve sensitive keys, potentially leading to loss of confidentiality.. EPSS estimates a 0.32% chance of exploitation in the next 30 days.

Description

Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the exposed URL to retrieve sensitive keys, potentially leading to loss of confidentiality.

Metrics

CVSS 4.0
6.3/10

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS Probability
0.32%

23.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
AMDAMD Ryzen™ 4000 Series Mobile Processors with Radeon™ GraphicsAll versions
AMDAMD Ryzen™ 7035 Series Processors with Radeon™ GraphicsAll versions
AMDAMD Athlon™ 3000 Series Mobile Processors with Radeon™ GraphicsAll versions
AMDAMD Ryzen™ 7040 Series Mobile Processors with Radeon™ GraphicsAll versions
AMDAMD Ryzen™ 7045 Series Mobile Processors with Radeon™ GraphicsAll versions
AMDAMD Ryzen™ 7000 Series Desktop ProcessorsAll versions
AMDAMD Ryzen™ 3000 Series Desktop ProcessorsAll versions
AMDAMD Ryzen™ Threadripper™ PRO 3000 WX-Series ProcessorsAll versions
AMDAMD Ryzen™ 7030 Series Mobile Processors with Radeon™ GraphicsAll versions
AMDAMD Ryzen™ Threadripper™ 3000 ProcessorsAll versions
AMDAMD Ryzen™ 9000HX Series ProcessorsAll versions
AMDAMD Ryzen™ AI 300 Series ProcessorsAll versions
AMDAMD Ryzen™ Threadripper™ PRO 5000 WX-Series ProcessorsAll versions
AMDAMD Ryzen™ Threadripper™ PRO 7000 WX-Series ProcessorsAll versions
AMDAMD Ryzen™ 8000 Series Desktop ProcessorsAll versions
AMDAMD Ryzen™ 9000 Series Desktop ProcessorsAll versions
AMDAMD Ryzen™ 5000 Series Mobile Processors with Radeon™ GraphicsAll versions
AMDAMD Ryzen™ 4000 Series Desktop ProcessorsAll versions
AMDAMD Ryzen™ 5000 Series Desktop ProcessorsAll versions
AMDAMD Ryzen™ 5000 Series Desktop Processors with Radeon™ GraphicsAll versions
AMDAMD Ryzen™ 8040 Series Mobile Processors with Radeon™ GraphicsAll versions
AMDAMD Ryzen™ 6000 Series Processors with Radeon™ GraphicsAll versions
AMDAMD Ryzen™ AI Max 300 Series ProcessorsAll versions
AMDNot publicAll versions
AMDAMD Ryzen™ Threadripper™ PRO 9000 WX-Series ProcessorsAll versions
AMDAMD Device Management Portal (ADMP)All versions

References

Timeline

Published
Last Modified
Status
Awaiting Analysis

Frequently Asked Questions

What is CVE-2025-62619?
Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the exposed URL to retrieve sensitive keys, potentially leading to loss of confidentiality.
How severe is CVE-2025-62619?
CVE-2025-62619 has a CVSS score of 6.3/10 (MEDIUM severity). The EPSS model estimates a 0.32% probability of exploitation in the next 30 days.
How do I fix CVE-2025-62619?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2025

View all 2025CVEs →

Are you affected by CVE-2025-62619?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST