EUVD-2026-36488
GHSA-7w59-qfq7-wqw6
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessGain in-path network position (rogue AP / ARP spoof)
-
DeliveryVictim launches AMD optional tool
-
ExploitTool issues plaintext HTTP request
-
ExecutionAttacker rewrites response with malicious payload
-
PersistTool processes/executes attacker content
-
ImpactArbitrary code execution as user
Vulnerability Assessment
| Weakness |
CWE
|
| Exploitation Conditions | Exploitation requires (1) the victim to have one of the three affected optional tools installed and to actually launch it so it issues the vulnerable HTTP request - these are not always-on system services; (2) the attacker to hold a network in-path position between the victim host and the AMD-hosted endpoint (rogue AP, ARP/DNS spoofing on the LAN, upstream router compromise, or malicious proxy) capable of modifying plaintext HTTP responses; and (3) the user-driven action implied by CVSS UI:P (running the tool / triggering its update or fetch flow). Limiting factors: tools are optional downloads not present on most endpoints, victims on TLS-only egress proxies or VPNs to trusted networks are largely out of reach, and the attacker cannot trigger the request remotely without the user opening the tool. |
| Impact | AMD scores this CVSS 4.0 7.7 (High) with AV:N/AC:L/AT:P (an attack requirement is present), PR:N, UI:P (passive user interaction), and VC:H/VI:H/VA:H. The 'AT:P' and 'UI:P' metrics correctly capture the real-world friction: the attacker must first hold a privileged network position (rogue Wi-Fi, ARP/DNS poisoning, upstream ISP/MITM, malicious proxy) and the victim must actually run the tool so it makes the vulnerable HTTP request. There is no CISA KEV listing, no POC reference, and no EPSS score in the supplied data, so this is best treated as a credible but conditional RCE rather than a mass-exploitation threat. Priority is elevated for fleets that run these tools on untrusted networks (laptops, lab benches, field engineers) and lower for tightly controlled corporate LANs, but the high impact triad (C/I/A all High) means a successful MitM yields full compromise of the user account running the tool. |
| Exploit ScenarioDerived | A user runs AMD Ryzen Master or μProf from a coffee-shop or hotel Wi-Fi controlled by an attacker; the tool issues an HTTP request (e.g., update check or resource download) and the attacker rewrites the response to deliver a malicious executable or library, which the tool loads, granting code execution as the logged-in user. The same outcome is reachable from a compromised upstream router, malicious proxy, or DNS-poisoning attack on a corporate LAN. No public exploit identified at time of analysis. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Jun 12, 2026
Man-in-the-middle attacks against AMD's optional desktop tools - AMD Management Console (AMC), AMD Ryzen Master, and AMD μProf - can lead to arbitrary code execution because the affected utilities transport data over plaintext HTTP rather than TLS. An attacker positioned on the network path between a victim workstation and the AMD endpoint can tamper with traffic (most plausibly update or telemetry channels) to substitute malicious content that is then executed by the tool. No public exploit identified at time of analysis and the issue is not in CISA KEV; EPSS data was not provided.
RemediationAI
Patch available per vendor advisory: update AMD Management Console, AMD Ryzen Master, and AMD μProf to the versions listed in AMD-SB-9027 (https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9027.html) - exact fix versions are not included in this dataset and should be taken directly from that bulletin. Until patching, uninstall the optional tools from systems that do not actively need them (none are required for CPU operation), and instruct users not to run AMC/Ryzen Master/μProf while connected to untrusted networks such as public Wi-Fi or shared hotel/conference LANs; route required usage through a trusted VPN so the HTTP traffic cannot be intercepted on the local segment. Egress filtering or HTTPS-only proxies can also block the cleartext fetches, with the side effect of breaking any tool feature (update check, telemetry, asset download) that depends on the insecure endpoint.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The flaw is rooted in CWE-1428 (use of an insecure transport / reliance on HTTP instead of HTTPS), meaning one or more network calls performed by the tools are not protected by certificate-validated TLS. The affected products per the CPE data are AMD Management Console (cpe:2.3:a:amd:amd_management_console_(amc)), AMD Ryzen Master (cpe:2.3:a:amd:amd_ryzen™_master) and AMD μProf (cpe:2.3:a:amd:amd_µprof) - all Windows-side companion utilities that talk back to AMD-hosted services for updates, profiling assets, or telemetry. When such a client trusts the integrity of an unauthenticated HTTP channel for code, scripts, libraries, or installer payloads, an in-path attacker can swap the response and turn a benign download into native code execution in the user's session.
Know when Amd Prof gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Network-reachable but requires an in-path MitM (AC:H) and the user must run the tool (UI:R); no auth needed (PR:N) and successful RCE compromises C/I/A fully.
Primary rating from Vendor (AMD).
CVSS VectorVendor: AMD
DescriptionCVE.org
The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution.
Executive ViewAI
Three AMD desktop utilities (Management Console, Ryzen Master, μProf) contain network update channels vulnerable to interception and tampering by attackers with network access, enabling arbitrary code execution across engineering and development workstations. No public exploit identified at time of analysis. Organizations deploying these optional tools face persistent risk requiring immediate network-layer defenses until vendor releases a patch.
No vendor-released patch identified at time of analysis. Interim mitigations: (1) Disable optional AMD utilities where operationally feasible to eliminate attack surface; (2) Network segmentation isolating systems running these tools from general corporate networks; (3) SSL/TLS inspection and traffic analysis on update/telemetry channels to detect malicious content injection; (4) Endpoint detection and response (EDR) configured to alert on suspicious process execution originating from AMD utility directories.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.
Unrestricted resource allocation in AMD µProf allows a local low-privileged user to consume excessive system resources,
Improper access control in AMD µProf exposes a kernel-shared memory section to low-privileged local users, enabling writ
Exploit-DB