CVE-2023-20570

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-20570", "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "state": "PUBLISHED", "assignerShortName": "AMD", "dateReserved": "2022-10-27T18:53:39.754Z", "datePublished": "2024-02-13T17:14:09.431Z", "dateUpdated": "2025-03-22T14:12:52.749Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Alveo\u2122 Card (UltraScale\u2122and UltraScale+\u2122 based)", "vendor": "AMD", "versions": [{"status": "affected", "version": "all"}]}, {"defaultStatus": "unaffected", "product": "Kintex\u2122 UltraScale\u2122 FPGA", "vendor": "AMD", "versions": [{"status": "affected", "version": "all"}]}, {"defaultStatus": "unaffected", "product": "Virtex\u2122 UltraScale\u2122 FPGA", "vendor": "AMD", "versions": [{"status": "affected", "version": "all"}]}, {"defaultStatus": "unaffected", "product": "Kintex\u2122UltraScale+\u2122 FPGA", "vendor": "AMD", "versions": [{"status": "affected", "version": "all"}]}, {"defaultStatus": "unaffected", "product": "Virtex\u2122 UltraScale+\u2122FPGA", "vendor": "AMD", "versions": [{"status": "affected", "version": "all"}]}, {"defaultStatus": "unaffected", "product": "Artix\u2122 UltraScale+\u2122 FPGA", "vendor": "AMD", "versions": [{"status": "affected", "version": "all"}]}], "datePublic": "2024-02-13T17:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Insufficient verification of data authenticity in\nthe configuration state machine may allow a local attacker to potentially load\narbitrary bitstreams.\n\n\n\n</p>"}], "value": "Insufficient verification of data authenticity in\nthe configuration state machine may allow a local attacker to potentially load\narbitrary bitstreams.\n\n\n\n\n\n"}], "providerMetadata": {"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "shortName": "AMD", "dateUpdated": "2024-02-13T17:14:09.431Z"}, "references": [{"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002.html"}], "source": {"advisory": "AMD-SB-8002", "discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@amd.com", "DATE_PUBLIC": "2022-04-26T15:00:00.000Z", "ID": "CVE-2022-23822", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Zynq-7000 SoC FSBL", "version": {"version_data": [{"platform": "Zynq-7000 SoC FSBL", "version_affected": "<=", "version_name": "2021.2", "version_value": "2022.1"}]}}]}, "vendor_name": "AMD-Xilinx"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "In this physical attack, an attacker may potentially exploit the Zynq-7000 SoC First Stage Boot Loader (FSBL) by bypassing authentication and loading a malicious image onto the device. This in turn may further allow the attacker to perform additional attacks such as such as using the device as a decryption oracle. An anticipated mitigation via a 2022.1 patch will resolve the issue."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-863 Incorrect Authorization"}]}]}, "references": {"reference_data": [{"name": "https://support.xilinx.com/s/article/76974", "refsource": "MISC", "url": "https://support.xilinx.com/s/article/76974"}, {"name": "https://github.com/Xilinx/embeddedsw/tree/master/lib/sw_apps/zynq_fsbl", "refsource": "MISC", "url": "https://github.com/Xilinx/embeddedsw/tree/master/lib/sw_apps/zynq_fsbl"}]}, "source": {"discovery": "EXTERNAL"}}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-345", "lang": "en", "description": "CWE-345 Insufficient Verification of Data Authenticity"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.3, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-02-14T15:49:13.872018Z", "id": "CVE-2023-20570", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-22T14:12:52.749Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T09:05:36.265Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002.html", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002.html", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T09:05:36.265Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.3, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2023-20570", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-02-14T15:49:13.872018Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-345", "description": "CWE-345 Insufficient Verification of Data Authenticity"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:11.372Z"}}], "cna": {"source": {"advisory": "AMD-SB-8002", "discovery": "EXTERNAL"}, "affected": [{"vendor": "AMD", "product": "Alveo\u2122 Card (UltraScale\u2122and UltraScale+\u2122 based)", "versions": [{"status": "affected", "version": "all"}], "defaultStatus": "unaffected"}, {"vendor": "AMD", "product": "Kintex\u2122 UltraScale\u2122 FPGA", "versions": [{"status": "affected", "version": "all"}], "defaultStatus": "unaffected"}, {"vendor": "AMD", "product": "Virtex\u2122 UltraScale\u2122 FPGA", "versions": [{"status": "affected", "version": "all"}], "defaultStatus": "unaffected"}, {"vendor": "AMD", "product": "Kintex\u2122UltraScale+\u2122 FPGA", "versions": [{"status": "affected", "version": "all"}], "defaultStatus": "unaffected"}, {"vendor": "AMD", "product": "Virtex\u2122 UltraScale+\u2122FPGA", "versions": [{"status": "affected", "version": "all"}], "defaultStatus": "unaffected"}, {"vendor": "AMD", "product": "Artix\u2122 UltraScale+\u2122 FPGA", "versions": [{"status": "affected", "version": "all"}], "defaultStatus": "unaffected"}], "datePublic": "2024-02-13T17:00:00.000Z", "references": [{"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002.html"}], "x_generator": {"engine": "Vulnogram 0.0.9"}, "descriptions": [{"lang": "en", "value": "Insufficient verification of data authenticity in\nthe configuration state machine may allow a local attacker to potentially load\narbitrary bitstreams.\n\n\n\n\n\n", "supportingMedia": [{"type": "text/html", "value": "<p>Insufficient verification of data authenticity in\nthe configuration state machine may allow a local attacker to potentially load\narbitrary bitstreams.\n\n\n\n</p>", "base64": false}]}], "providerMetadata": {"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "shortName": "AMD", "dateUpdated": "2024-02-13T17:14:09.431Z"}, "x_legacyV4Record": {"source": {"discovery": "EXTERNAL"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"version": {"version_data": [{"platform": "Zynq-7000 SoC FSBL", "version_name": "2021.2", "version_value": "2022.1", "version_affected": "<="}]}, "product_name": "Zynq-7000 SoC FSBL"}]}, "vendor_name": "AMD-Xilinx"}]}}, "data_type": "CVE", "generator": {"engine": "Vulnogram 0.0.9"}, "references": {"reference_data": [{"url": "https://support.xilinx.com/s/article/76974", "name": "https://support.xilinx.com/s/article/76974", "refsource": "MISC"}, {"url": "https://github.com/Xilinx/embeddedsw/tree/master/lib/sw_apps/zynq_fsbl", "name": "https://github.com/Xilinx/embeddedsw/tree/master/lib/sw_apps/zynq_fsbl", "refsource": "MISC"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "eng", "value": "In this physical attack, an attacker may potentially exploit the Zynq-7000 SoC First Stage Boot Loader (FSBL) by bypassing authentication and loading a malicious image onto the device. This in turn may further allow the attacker to perform additional attacks such as such as using the device as a decryption oracle. An anticipated mitigation via a 2022.1 patch will resolve the issue."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-863 Incorrect Authorization"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2022-23822", "STATE": "PUBLIC", "ASSIGNER": "psirt@amd.com", "DATE_PUBLIC": "2022-04-26T15:00:00.000Z"}}}}, "cveMetadata": {"cveId": "CVE-2023-20570", "state": "PUBLISHED", "dateUpdated": "2025-03-22T14:12:52.749Z", "dateReserved": "2022-10-27T18:53:39.754Z", "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "datePublished": "2024-02-13T17:14:09.431Z", "assignerShortName": "AMD"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Alveo\u2122 Card (UltraScale\u2122and UltraScale+\u2122 based)", "vendor": "AMD", "versions": [{"status": "affected", "version": "all"}]}, {"defaultStatus": "unaffected", "product": "Kintex\u2122 UltraScale\u2122 FPGA", "vendor": "AMD", "versions": [{"status": "affected", "version": "all"}]}, {"defaultStatus": "unaffected", "product": "Virtex\u2122 UltraScale\u2122 FPGA", "vendor": "AMD", "versions": [{"status": "affected", "version": "all"}]}, {"defaultStatus": "unaffected", "product": "Kintex\u2122UltraScale+\u2122 FPGA", "vendor": "AMD", "versions": [{"status": "affected", "version": "all"}]}, {"defaultStatus": "unaffected", "product": "Virtex\u2122 UltraScale+\u2122FPGA", "vendor": "AMD", "versions": [{"status": "affected", "version": "all"}]}, {"defaultStatus": "unaffected", "product": "Artix\u2122 UltraScale+\u2122 FPGA", "vendor": "AMD", "versions": [{"status": "affected", "version": "all"}]}], "source": "psirt@amd.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:alveo_u50_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "FE3084B4-F4E8-4975-9099-A15F205A8C26", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:alveo_u50:-:*:*:*:*:*:*:*", "matchCriteriaId": "57C8F59B-E976-431F-AAEB-7AB01F026968", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:alveo_u200_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "27371539-A727-4B2D-AB8D-D63CFAE9377E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:alveo_u200:-:*:*:*:*:*:*:*", "matchCriteriaId": "6D56FAF7-CFF4-49D9-BCF5-37D09AF6524A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:alveo_u250_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "558BA7D5-222E-4F72-9540-55C33C4CFBED", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:alveo_u250:-:*:*:*:*:*:*:*", "matchCriteriaId": "F3384644-531A-42D5-ADB0-2F936EAB6A5C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:alveo_u280_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "145D4F5F-42C8-4AF7-AE43-73B13EB96751", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:alveo_u280:-:*:*:*:*:*:*:*", "matchCriteriaId": "0F60242D-3205-4B99-9B9F-78F12F097D4A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:kintex_ultrascale\\+_ku3p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "D7CC5828-0BB1-4F85-BE47-F776DCA3EAA5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:kintex_ultrascale\\+_ku3p:-:*:*:*:*:*:*:*", "matchCriteriaId": "C3A976D3-01FA-4404-8901-8FE7185F8B9F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:kintex_ultrascale\\+_ku5p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "456B87C9-4AD6-4FD6-8908-3295E5B80ABB", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:kintex_ultrascale\\+_ku5p:-:*:*:*:*:*:*:*", "matchCriteriaId": "3E078E0A-5595-4F6B-A884-65270D679416", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:kintex_ultrascale\\+_ku9p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6239967B-6E07-4893-A829-9F5C263199D0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:kintex_ultrascale\\+_ku9p:-:*:*:*:*:*:*:*", "matchCriteriaId": "DDF501E6-6CC8-428F-BF86-890DD686DA3D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:kintex_ultrascale\\+_ku11p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "FDFF0325-B464-45D5-81B1-293E2CE46CD6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:kintex_ultrascale\\+_ku11p:-:*:*:*:*:*:*:*", "matchCriteriaId": "4F226691-737E-4C02-9CBB-61AF1401A422", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:kintex_ultrascale\\+_ku13p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "A6AB870D-72B7-4ACE-883C-8D1162D13021", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:kintex_ultrascale\\+_ku13p:-:*:*:*:*:*:*:*", "matchCriteriaId": "7C8DCE48-CA5B-4F6C-9A63-A3E733DB7C20", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:kintex_ultrascale\\+_ku15p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "0F821EFE-9F3F-408C-B80B-90E49810D7EB", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:kintex_ultrascale\\+_ku15p:-:*:*:*:*:*:*:*", "matchCriteriaId": "E54BC7A7-64E4-4B3D-8334-F96B40374AE3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:kintex_ultrascale\\+_ku19p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "3A9A8A1B-0E1D-41D4-9085-B31AD8BE8200", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:kintex_ultrascale\\+_ku19p:-:*:*:*:*:*:*:*", "matchCriteriaId": "72E647CC-D0FB-4711-ACB4-E797F97F9F51", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:kintex_ultrascale_ku025_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "B26E5FEA-216A-4C24-9AD4-32D242395634", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:kintex_ultrascale_ku025:-:*:*:*:*:*:*:*", "matchCriteriaId": "E1A983BA-3058-4691-B9AE-D397DF6B47A8", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:kintex_ultrascale_ku035_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C6B8A33A-C11E-42B7-A288-9C1DD972C1B9", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:kintex_ultrascale_ku035:-:*:*:*:*:*:*:*", "matchCriteriaId": "CD1133C9-0555-4546-8345-464ADA900D67", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:kintex_ultrascale_ku040_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "36C99A12-D71D-42DD-8AE5-1464FCD672B1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:kintex_ultrascale_ku040:-:*:*:*:*:*:*:*", "matchCriteriaId": "52CFF343-FFF5-4D58-98BF-6805DC42B6DC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:kintex_ultrascale_ku060_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "19BDCF66-53F1-4157-B778-6626B9EC4D45", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:kintex_ultrascale_ku060:-:*:*:*:*:*:*:*", "matchCriteriaId": "0A4D8B64-2BDA-44A1-84BB-E3326AD620D3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:kintex_ultrascale_ku085_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "AF604946-58CB-4AFC-A955-1BBE9FDD666F", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:kintex_ultrascale_ku085:-:*:*:*:*:*:*:*", "matchCriteriaId": "EF3EF9C5-3EBD-42C6-B4A6-8C5A5A445167", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:kintex_ultrascale_ku095_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E79ED60A-A332-4A31-8E58-DB410377F7E3", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:kintex_ultrascale_ku095:-:*:*:*:*:*:*:*", "matchCriteriaId": "CA865FE0-F41E-4478-9876-338D77624736", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:kintex_ultrascale_ku115_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E6CF7C22-D116-41BC-9CB1-6EC6ACCAC094", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:kintex_ultrascale_ku115:-:*:*:*:*:*:*:*", "matchCriteriaId": "306D2B25-5267-4681-B3AB-9374731BDEF1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:virtex_ultrascale_xcvu065_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "BE9AD5DF-956D-46A8-9ACC-B0314EEF9687", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:virtex_ultrascale_xcvu065:-:*:*:*:*:*:*:*", "matchCriteriaId": "ADA2BDE1-59C6-46D9-A44E-05157582D102", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:virtex_ultrascale_xcvu080_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5CEA10CD-C183-4ACF-A7AD-B5CC257C9297", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:virtex_ultrascale_xcvu080:-:*:*:*:*:*:*:*", "matchCriteriaId": "F00DEE45-B1D8-4A12-B69E-C38DD88F7905", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:virtex_ultrascale_xcvu095_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "88B1B3EB-46C9-460C-B6F2-3D10A1658AE5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:virtex_ultrascale_xcvu095:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2167361-8B7F-451A-B8BC-C5838DBE60B6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:virtex_ultrascale_xcvu125_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "507D06CE-159D-4B27-9044-659029483B63", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:virtex_ultrascale_xcvu125:-:*:*:*:*:*:*:*", "matchCriteriaId": "92B7BAF0-FE74-4E90-8836-44E17A6593D3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:virtex_ultrascale_xcvu160_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "92F26815-1E71-4DE9-9E99-4E8E5F3180AD", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:virtex_ultrascale_xcvu160:-:*:*:*:*:*:*:*", "matchCriteriaId": "012095A7-4BE9-44AC-99D5-910EBDACE94D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:virtex_ultrascale_xcvu190_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "A44E3CD8-DE16-4FB9-B013-1D72C8CB7798", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:virtex_ultrascale_xcvu190:-:*:*:*:*:*:*:*", "matchCriteriaId": "EA7D6A1D-DA77-4614-9C8A-A53678614E31", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:virtex_ultrascale_xcvu440_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "7D3A3078-9F89-47D4-B538-79166DB14880", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:virtex_ultrascale_xcvu440:-:*:*:*:*:*:*:*", "matchCriteriaId": "E8ACC94A-67F4-41EC-8D38-8D1F754A5082", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu3p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "45BEDBCC-7A2B-4763-9F31-CF5F613719F2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu3p:-:*:*:*:*:*:*:*", "matchCriteriaId": "45AA8115-3295-415A-9C28-B0B7B6103A9E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu5p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "883039DE-36C8-4039-87C2-667511C40B2E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu5p:-:*:*:*:*:*:*:*", "matchCriteriaId": "77C94F1F-D12B-425B-9CA3-620A32394B01", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu7p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "F7F9EEF9-6DA8-4396-919C-00D433B0817A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu7p:-:*:*:*:*:*:*:*", "matchCriteriaId": "4250BFEC-BC27-4E49-8356-6CBCC750062D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu9p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E5525647-CEC9-49DC-9BE6-2EF4AA1C20D8", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu9p:-:*:*:*:*:*:*:*", "matchCriteriaId": "FCEB725B-51D4-415C-9B8A-75D9F8B5797B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu11p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "2A22FB3F-B742-461D-9E4C-C363EE88AF4E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu11p:-:*:*:*:*:*:*:*", "matchCriteriaId": "30BD42BF-7DAC-4E7A-BAF4-928C78DD7F62", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu13p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E4B69466-5EC8-4CA4-8402-E352EBAD55A5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu13p:-:*:*:*:*:*:*:*", "matchCriteriaId": "5614CECE-4002-4A26-9D11-1AE0EF920616", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu19p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "915ACC02-696E-4E98-9163-33698E71675E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu19p:-:*:*:*:*:*:*:*", "matchCriteriaId": "A5FC847B-58E9-495E-9A34-968040909D2E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu23p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4BBCB6D8-A988-4084-8AF1-DFBB0D818270", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu23p:-:*:*:*:*:*:*:*", "matchCriteriaId": "DE9512DE-DCD8-483F-832C-1CE464E209E0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu27p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5428B305-A5C5-461D-B992-DB5A967B13FB", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu27p:-:*:*:*:*:*:*:*", "matchCriteriaId": "DF9047FE-8E7D-4F22-903E-F77042A407DB", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu29p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "16354B52-EB87-48B9-9986-6F78A82837C2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu29p:-:*:*:*:*:*:*:*", "matchCriteriaId": "59E49C38-696F-4CA1-9314-787F5AF5A5F3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu31p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C9091492-205A-43BD-991E-931CB5C4E3FD", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu31p:-:*:*:*:*:*:*:*", "matchCriteriaId": "A346B590-0809-4A85-988B-EF32D866BDAC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu33p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DB473A6A-C1D1-4810-A4DB-C791B9F22187", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu33p:-:*:*:*:*:*:*:*", "matchCriteriaId": "BFD6516F-9F71-4073-A38A-F16430C60567", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu35p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "B1456CAF-52C0-49A9-BE66-41F7A72E7919", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu35p:-:*:*:*:*:*:*:*", "matchCriteriaId": "F7E97A0A-7325-4A26-A1F7-0CDE6C4A5442", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu37p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DD9872B4-31D5-4ACD-A0CE-833343223ED4", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu37p:-:*:*:*:*:*:*:*", "matchCriteriaId": "9CDAC404-93FE-4277-9994-74F25DF9CB1B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu45p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1C209441-61ED-403E-BCD4-DB3444CD90F5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu45p:-:*:*:*:*:*:*:*", "matchCriteriaId": "19764E64-16D9-414A-B0EA-5993C0C365A9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu47p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DDF08DB4-165B-4EBC-90D7-022DEF7393BF", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu47p:-:*:*:*:*:*:*:*", "matchCriteriaId": "786E9CE1-2311-4A53-A4AB-F194BEA84E3A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu57p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "FD7A47E7-C80C-4448-9FEB-04BC3829FFDE", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu57p:-:*:*:*:*:*:*:*", "matchCriteriaId": "103CC10B-695B-4072-BE5F-99366DC8694B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:artix_ultrascale\\+_au7p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4F832541-95DD-4132-B8FA-F6C81AECF797", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:artix_ultrascale\\+_au7p:-:*:*:*:*:*:*:*", "matchCriteriaId": "3CE22147-BB84-4251-8558-4450B330A038", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:artix_ultrascale\\+_au10p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "B2BB62A9-7C0E-4739-B857-E142C9EEA3AF", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:artix_ultrascale\\+_au10p:-:*:*:*:*:*:*:*", "matchCriteriaId": "AE2205FF-381F-4AA9-9B7C-1FD43DCC3C55", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:artix_ultrascale\\+_au15p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6ADE1C80-BE11-45E6-87A9-048F203915E9", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:artix_ultrascale\\+_au15p:-:*:*:*:*:*:*:*", "matchCriteriaId": "46D644F3-DC4F-48EE-AF84-714C3AE887B1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:artix_ultrascale\\+_au20p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5D547420-70A4-4C71-9637-CE3DD54A8C84", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:artix_ultrascale\\+_au20p:-:*:*:*:*:*:*:*", "matchCriteriaId": "24A055B7-661F-4B00-922E-1761B4F51D33", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:artix_ultrascale\\+_au25p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "A729C913-B41C-414E-8FB2-81D5E158A949", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:artix_ultrascale\\+_au25p:-:*:*:*:*:*:*:*", "matchCriteriaId": "BDD539D3-CAFA-40E5-9381-F25E7D99622B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Insufficient verification of data authenticity in\nthe configuration state machine may allow a local attacker to potentially load\narbitrary bitstreams.\n\n\n\n\n\n"}, {"lang": "es", "value": "Una verificaci\u00f3n insuficiente de la autenticidad de los datos en la m\u00e1quina de estado de configuraci\u00f3n puede permitir que un atacante local cargue potencialmente flujos de bits arbitrarios."}], "id": "CVE-2023-20570", "lastModified": "2026-06-17T05:30:20.227", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 1.4, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2023-20570", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2024-02-14T15:49:13.872018Z", "version": "2.0.3"}}]}, "published": "2024-02-13T18:15:47.233", "references": [{"source": "psirt@amd.com", "tags": ["Vendor Advisory"], "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002.html"}], "sourceIdentifier": "psirt@amd.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-345"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-345"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{}