CVE-2023-20570 (GCVE-0-2023-20570)

Vulnerability from cvelistv5 – Published: 2024-02-13 17:14 – Updated: 2025-03-22 14:12
VLAI
Summary
Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentially load arbitrary bitstreams.
Severity
3.3 (Low)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
  • CWE-345 - Insufficient Verification of Data Authenticity
Assigner
AMD
References
Impacted products
Date Public
2024-02-13 17:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 3.3,
              "baseSeverity": "LOW",
              "confidentialityImpact": "NONE",
              "integrityImpact": "LOW",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-20570",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-02-14T15:49:13.872018Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-345",
                "description": "CWE-345 Insufficient Verification of Data Authenticity",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-22T14:12:52.749Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T09:05:36.265Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Alveo\u2122 Card (UltraScale\u2122and UltraScale+\u2122 based)",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "all"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Kintex\u2122 UltraScale\u2122 FPGA",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "all"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Virtex\u2122 UltraScale\u2122 FPGA",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "all"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Kintex\u2122UltraScale+\u2122 FPGA",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "all"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Virtex\u2122 UltraScale+\u2122FPGA",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "all"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Artix\u2122 UltraScale+\u2122 FPGA",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "all"
            }
          ]
        }
      ],
      "datePublic": "2024-02-13T17:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eInsufficient verification of data authenticity in\nthe configuration state machine may allow a local attacker to potentially load\narbitrary bitstreams.\n\n\n\n\u003c/p\u003e"
            }
          ],
          "value": "Insufficient verification of data authenticity in\nthe configuration state machine may allow a local attacker to potentially load\narbitrary bitstreams.\n\n\n\n\n\n"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-02-13T17:14:09.431Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002.html"
        }
      ],
      "source": {
        "advisory": "AMD-SB-8002",
        "discovery": "EXTERNAL"
      },
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@amd.com",
          "DATE_PUBLIC": "2022-04-26T15:00:00.000Z",
          "ID": "CVE-2022-23822",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Zynq-7000 SoC FSBL",
                      "version": {
                        "version_data": [
                          {
                            "platform": "Zynq-7000 SoC FSBL",
                            "version_affected": "\u003c=",
                            "version_name": "2021.2",
                            "version_value": "2022.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "AMD-Xilinx"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In this physical attack, an attacker may potentially exploit the Zynq-7000 SoC First Stage Boot Loader (FSBL) by bypassing authentication and loading a malicious image onto the device. This in turn may further allow the attacker to perform additional attacks such as such as using the device as a decryption oracle. An anticipated mitigation via a 2022.1 patch will resolve the issue."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-863 Incorrect Authorization"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.xilinx.com/s/article/76974",
              "refsource": "MISC",
              "url": "https://support.xilinx.com/s/article/76974"
            },
            {
              "name": "https://github.com/Xilinx/embeddedsw/tree/master/lib/sw_apps/zynq_fsbl",
              "refsource": "MISC",
              "url": "https://github.com/Xilinx/embeddedsw/tree/master/lib/sw_apps/zynq_fsbl"
            }
          ]
        },
        "source": {
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2023-20570",
    "datePublished": "2024-02-13T17:14:09.431Z",
    "dateReserved": "2022-10-27T18:53:39.754Z",
    "dateUpdated": "2025-03-22T14:12:52.749Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-20570",
      "date": "2026-07-17",
      "epss": "0.00102",
      "percentile": "0.0115"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-20570\",\"sourceIdentifier\":\"psirt@amd.com\",\"published\":\"2024-02-13T18:15:47.233\",\"lastModified\":\"2026-06-17T05:30:20.227\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Insufficient verification of data authenticity in\\nthe configuration state machine may allow a local attacker to potentially load\\narbitrary bitstreams.\\n\\n\\n\\n\\n\\n\"},{\"lang\":\"es\",\"value\":\"Una verificaci\u00f3n insuficiente de la autenticidad de los datos en la m\u00e1quina de estado de configuraci\u00f3n puede permitir que un atacante local cargue potencialmente flujos de bits arbitrarios.\"}],\"affected\":[{\"source\":\"psirt@amd.com\",\"affectedData\":[{\"vendor\":\"AMD\",\"product\":\"Alveo\u2122 Card (UltraScale\u2122and UltraScale+\u2122 based)\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"all\",\"status\":\"affected\"}]},{\"vendor\":\"AMD\",\"product\":\"Kintex\u2122 UltraScale\u2122 FPGA\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"all\",\"status\":\"affected\"}]},{\"vendor\":\"AMD\",\"product\":\"Virtex\u2122 UltraScale\u2122 FPGA\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"all\",\"status\":\"affected\"}]},{\"vendor\":\"AMD\",\"product\":\"Kintex\u2122UltraScale+\u2122 FPGA\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"all\",\"status\":\"affected\"}]},{\"vendor\":\"AMD\",\"product\":\"Virtex\u2122 UltraScale+\u2122FPGA\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"all\",\"status\":\"affected\"}]},{\"vendor\":\"AMD\",\"product\":\"Artix\u2122 UltraScale+\u2122 FPGA\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"all\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N\",\"baseScore\":3.3,\"baseSeverity\":\"LOW\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":1.8,\"impactScore\":1.4},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N\",\"baseScore\":3.3,\"baseSeverity\":\"LOW\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":1.8,\"impactScore\":1.4}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-02-14T15:49:13.872018Z\",\"id\":\"CVE-2023-20570\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-345\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-345\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:alveo_u50_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FE3084B4-F4E8-4975-9099-A15F205A8C26\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:alveo_u50:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"57C8F59B-E976-431F-AAEB-7AB01F026968\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:alveo_u200_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"27371539-A727-4B2D-AB8D-D63CFAE9377E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:alveo_u200:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6D56FAF7-CFF4-49D9-BCF5-37D09AF6524A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:alveo_u250_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"558BA7D5-222E-4F72-9540-55C33C4CFBED\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:alveo_u250:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F3384644-531A-42D5-ADB0-2F936EAB6A5C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:alveo_u280_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"145D4F5F-42C8-4AF7-AE43-73B13EB96751\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:alveo_u280:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F60242D-3205-4B99-9B9F-78F12F097D4A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:kintex_ultrascale\\\\+_ku3p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D7CC5828-0BB1-4F85-BE47-F776DCA3EAA5\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:kintex_ultrascale\\\\+_ku3p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C3A976D3-01FA-4404-8901-8FE7185F8B9F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:kintex_ultrascale\\\\+_ku5p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"456B87C9-4AD6-4FD6-8908-3295E5B80ABB\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:kintex_ultrascale\\\\+_ku5p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3E078E0A-5595-4F6B-A884-65270D679416\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:kintex_ultrascale\\\\+_ku9p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6239967B-6E07-4893-A829-9F5C263199D0\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:kintex_ultrascale\\\\+_ku9p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DDF501E6-6CC8-428F-BF86-890DD686DA3D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:kintex_ultrascale\\\\+_ku11p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FDFF0325-B464-45D5-81B1-293E2CE46CD6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:kintex_ultrascale\\\\+_ku11p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4F226691-737E-4C02-9CBB-61AF1401A422\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:kintex_ultrascale\\\\+_ku13p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A6AB870D-72B7-4ACE-883C-8D1162D13021\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:kintex_ultrascale\\\\+_ku13p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7C8DCE48-CA5B-4F6C-9A63-A3E733DB7C20\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:kintex_ultrascale\\\\+_ku15p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F821EFE-9F3F-408C-B80B-90E49810D7EB\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:kintex_ultrascale\\\\+_ku15p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E54BC7A7-64E4-4B3D-8334-F96B40374AE3\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:kintex_ultrascale\\\\+_ku19p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3A9A8A1B-0E1D-41D4-9085-B31AD8BE8200\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:kintex_ultrascale\\\\+_ku19p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"72E647CC-D0FB-4711-ACB4-E797F97F9F51\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:kintex_ultrascale_ku025_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B26E5FEA-216A-4C24-9AD4-32D242395634\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:kintex_ultrascale_ku025:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E1A983BA-3058-4691-B9AE-D397DF6B47A8\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:kintex_ultrascale_ku035_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C6B8A33A-C11E-42B7-A288-9C1DD972C1B9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:kintex_ultrascale_ku035:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD1133C9-0555-4546-8345-464ADA900D67\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:kintex_ultrascale_ku040_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36C99A12-D71D-42DD-8AE5-1464FCD672B1\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:kintex_ultrascale_ku040:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"52CFF343-FFF5-4D58-98BF-6805DC42B6DC\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:kintex_ultrascale_ku060_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"19BDCF66-53F1-4157-B778-6626B9EC4D45\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:kintex_ultrascale_ku060:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0A4D8B64-2BDA-44A1-84BB-E3326AD620D3\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:kintex_ultrascale_ku085_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AF604946-58CB-4AFC-A955-1BBE9FDD666F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:kintex_ultrascale_ku085:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EF3EF9C5-3EBD-42C6-B4A6-8C5A5A445167\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:kintex_ultrascale_ku095_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E79ED60A-A332-4A31-8E58-DB410377F7E3\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:kintex_ultrascale_ku095:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CA865FE0-F41E-4478-9876-338D77624736\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:kintex_ultrascale_ku115_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E6CF7C22-D116-41BC-9CB1-6EC6ACCAC094\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:kintex_ultrascale_ku115:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"306D2B25-5267-4681-B3AB-9374731BDEF1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:virtex_ultrascale_xcvu065_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BE9AD5DF-956D-46A8-9ACC-B0314EEF9687\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:virtex_ultrascale_xcvu065:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ADA2BDE1-59C6-46D9-A44E-05157582D102\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:virtex_ultrascale_xcvu080_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5CEA10CD-C183-4ACF-A7AD-B5CC257C9297\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:virtex_ultrascale_xcvu080:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F00DEE45-B1D8-4A12-B69E-C38DD88F7905\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:virtex_ultrascale_xcvu095_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"88B1B3EB-46C9-460C-B6F2-3D10A1658AE5\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:virtex_ultrascale_xcvu095:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2167361-8B7F-451A-B8BC-C5838DBE60B6\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:virtex_ultrascale_xcvu125_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"507D06CE-159D-4B27-9044-659029483B63\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:virtex_ultrascale_xcvu125:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"92B7BAF0-FE74-4E90-8836-44E17A6593D3\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:virtex_ultrascale_xcvu160_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"92F26815-1E71-4DE9-9E99-4E8E5F3180AD\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:virtex_ultrascale_xcvu160:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"012095A7-4BE9-44AC-99D5-910EBDACE94D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:virtex_ultrascale_xcvu190_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A44E3CD8-DE16-4FB9-B013-1D72C8CB7798\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:virtex_ultrascale_xcvu190:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EA7D6A1D-DA77-4614-9C8A-A53678614E31\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:virtex_ultrascale_xcvu440_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7D3A3078-9F89-47D4-B538-79166DB14880\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:virtex_ultrascale_xcvu440:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E8ACC94A-67F4-41EC-8D38-8D1F754A5082\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:virtex_ultrascale\\\\+_vu3p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"45BEDBCC-7A2B-4763-9F31-CF5F613719F2\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:virtex_ultrascale\\\\+_vu3p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"45AA8115-3295-415A-9C28-B0B7B6103A9E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:virtex_ultrascale\\\\+_vu5p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"883039DE-36C8-4039-87C2-667511C40B2E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:virtex_ultrascale\\\\+_vu5p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"77C94F1F-D12B-425B-9CA3-620A32394B01\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:virtex_ultrascale\\\\+_vu7p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F7F9EEF9-6DA8-4396-919C-00D433B0817A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:virtex_ultrascale\\\\+_vu7p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4250BFEC-BC27-4E49-8356-6CBCC750062D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:virtex_ultrascale\\\\+_vu9p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5525647-CEC9-49DC-9BE6-2EF4AA1C20D8\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:virtex_ultrascale\\\\+_vu9p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FCEB725B-51D4-415C-9B8A-75D9F8B5797B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:virtex_ultrascale\\\\+_vu11p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2A22FB3F-B742-461D-9E4C-C363EE88AF4E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:virtex_ultrascale\\\\+_vu11p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"30BD42BF-7DAC-4E7A-BAF4-928C78DD7F62\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:virtex_ultrascale\\\\+_vu13p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E4B69466-5EC8-4CA4-8402-E352EBAD55A5\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:virtex_ultrascale\\\\+_vu13p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5614CECE-4002-4A26-9D11-1AE0EF920616\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:virtex_ultrascale\\\\+_vu19p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"915ACC02-696E-4E98-9163-33698E71675E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:virtex_ultrascale\\\\+_vu19p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A5FC847B-58E9-495E-9A34-968040909D2E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:virtex_ultrascale\\\\+_vu23p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4BBCB6D8-A988-4084-8AF1-DFBB0D818270\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:virtex_ultrascale\\\\+_vu23p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DE9512DE-DCD8-483F-832C-1CE464E209E0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:virtex_ultrascale\\\\+_vu27p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5428B305-A5C5-461D-B992-DB5A967B13FB\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:virtex_ultrascale\\\\+_vu27p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DF9047FE-8E7D-4F22-903E-F77042A407DB\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:virtex_ultrascale\\\\+_vu29p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"16354B52-EB87-48B9-9986-6F78A82837C2\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:virtex_ultrascale\\\\+_vu29p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"59E49C38-696F-4CA1-9314-787F5AF5A5F3\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:virtex_ultrascale\\\\+_vu31p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C9091492-205A-43BD-991E-931CB5C4E3FD\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:virtex_ultrascale\\\\+_vu31p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A346B590-0809-4A85-988B-EF32D866BDAC\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:virtex_ultrascale\\\\+_vu33p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB473A6A-C1D1-4810-A4DB-C791B9F22187\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:virtex_ultrascale\\\\+_vu33p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BFD6516F-9F71-4073-A38A-F16430C60567\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:virtex_ultrascale\\\\+_vu35p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B1456CAF-52C0-49A9-BE66-41F7A72E7919\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:virtex_ultrascale\\\\+_vu35p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F7E97A0A-7325-4A26-A1F7-0CDE6C4A5442\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:virtex_ultrascale\\\\+_vu37p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DD9872B4-31D5-4ACD-A0CE-833343223ED4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:virtex_ultrascale\\\\+_vu37p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9CDAC404-93FE-4277-9994-74F25DF9CB1B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:virtex_ultrascale\\\\+_vu45p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1C209441-61ED-403E-BCD4-DB3444CD90F5\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:virtex_ultrascale\\\\+_vu45p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"19764E64-16D9-414A-B0EA-5993C0C365A9\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:virtex_ultrascale\\\\+_vu47p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DDF08DB4-165B-4EBC-90D7-022DEF7393BF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:virtex_ultrascale\\\\+_vu47p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"786E9CE1-2311-4A53-A4AB-F194BEA84E3A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:virtex_ultrascale\\\\+_vu57p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FD7A47E7-C80C-4448-9FEB-04BC3829FFDE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:virtex_ultrascale\\\\+_vu57p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"103CC10B-695B-4072-BE5F-99366DC8694B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:artix_ultrascale\\\\+_au7p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4F832541-95DD-4132-B8FA-F6C81AECF797\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:artix_ultrascale\\\\+_au7p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3CE22147-BB84-4251-8558-4450B330A038\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:artix_ultrascale\\\\+_au10p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B2BB62A9-7C0E-4739-B857-E142C9EEA3AF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:artix_ultrascale\\\\+_au10p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AE2205FF-381F-4AA9-9B7C-1FD43DCC3C55\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:artix_ultrascale\\\\+_au15p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6ADE1C80-BE11-45E6-87A9-048F203915E9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:artix_ultrascale\\\\+_au15p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"46D644F3-DC4F-48EE-AF84-714C3AE887B1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:artix_ultrascale\\\\+_au20p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5D547420-70A4-4C71-9637-CE3DD54A8C84\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:artix_ultrascale\\\\+_au20p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"24A055B7-661F-4B00-922E-1761B4F51D33\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:amd:artix_ultrascale\\\\+_au25p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A729C913-B41C-414E-8FB2-81D5E158A949\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:amd:artix_ultrascale\\\\+_au25p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BDD539D3-CAFA-40E5-9381-F25E7D99622B\"}]}]}],\"references\":[{\"url\":\"https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002.html\",\"source\":\"psirt@amd.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "redhat_vex": {
      "current_release_date": "2025-05-28T23:29:06+00:00",
      "cve": "CVE-2023-20570",
      "id": "CVE-2023-20570",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2023-20570",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-20570.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002.html\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T09:05:36.265Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 3.3, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"LOW\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N\", \"integrityImpact\": \"LOW\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-20570\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-02-14T15:49:13.872018Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-345\", \"description\": \"CWE-345 Insufficient Verification of Data Authenticity\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-05-23T19:01:11.372Z\"}}], \"cna\": {\"source\": {\"advisory\": \"AMD-SB-8002\", \"discovery\": \"EXTERNAL\"}, \"affected\": [{\"vendor\": \"AMD\", \"product\": \"Alveo\\u2122 Card (UltraScale\\u2122and UltraScale+\\u2122 based)\", \"versions\": [{\"status\": \"affected\", \"version\": \"all\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"AMD\", \"product\": \"Kintex\\u2122 UltraScale\\u2122 FPGA\", \"versions\": [{\"status\": \"affected\", \"version\": \"all\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"AMD\", \"product\": \"Virtex\\u2122 UltraScale\\u2122 FPGA\", \"versions\": [{\"status\": \"affected\", \"version\": \"all\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"AMD\", \"product\": \"Kintex\\u2122UltraScale+\\u2122 FPGA\", \"versions\": [{\"status\": \"affected\", \"version\": \"all\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"AMD\", \"product\": \"Virtex\\u2122 UltraScale+\\u2122FPGA\", \"versions\": [{\"status\": \"affected\", \"version\": \"all\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"AMD\", \"product\": \"Artix\\u2122 UltraScale+\\u2122 FPGA\", \"versions\": [{\"status\": \"affected\", \"version\": \"all\"}], \"defaultStatus\": \"unaffected\"}], \"datePublic\": \"2024-02-13T17:00:00.000Z\", \"references\": [{\"url\": \"https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002.html\"}], \"x_generator\": {\"engine\": \"Vulnogram 0.0.9\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"Insufficient verification of data authenticity in\\nthe configuration state machine may allow a local attacker to potentially load\\narbitrary bitstreams.\\n\\n\\n\\n\\n\\n\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eInsufficient verification of data authenticity in\\nthe configuration state machine may allow a local attacker to potentially load\\narbitrary bitstreams.\\n\\n\\n\\n\u003c/p\u003e\", \"base64\": false}]}], \"providerMetadata\": {\"orgId\": \"b58fc414-a1e4-4f92-9d70-1add41838648\", \"shortName\": \"AMD\", \"dateUpdated\": \"2024-02-13T17:14:09.431Z\"}, \"x_legacyV4Record\": {\"source\": {\"discovery\": \"EXTERNAL\"}, \"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"version\": {\"version_data\": [{\"platform\": \"Zynq-7000 SoC FSBL\", \"version_name\": \"2021.2\", \"version_value\": \"2022.1\", \"version_affected\": \"\u003c=\"}]}, \"product_name\": \"Zynq-7000 SoC FSBL\"}]}, \"vendor_name\": \"AMD-Xilinx\"}]}}, \"data_type\": \"CVE\", \"generator\": {\"engine\": \"Vulnogram 0.0.9\"}, \"references\": {\"reference_data\": [{\"url\": \"https://support.xilinx.com/s/article/76974\", \"name\": \"https://support.xilinx.com/s/article/76974\", \"refsource\": \"MISC\"}, {\"url\": \"https://github.com/Xilinx/embeddedsw/tree/master/lib/sw_apps/zynq_fsbl\", \"name\": \"https://github.com/Xilinx/embeddedsw/tree/master/lib/sw_apps/zynq_fsbl\", \"refsource\": \"MISC\"}]}, \"data_format\": \"MITRE\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"In this physical attack, an attacker may potentially exploit the Zynq-7000 SoC First Stage Boot Loader (FSBL) by bypassing authentication and loading a malicious image onto the device. This in turn may further allow the attacker to perform additional attacks such as such as using the device as a decryption oracle. An anticipated mitigation via a 2022.1 patch will resolve the issue.\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"CWE-863 Incorrect Authorization\"}]}]}, \"data_version\": \"4.0\", \"CVE_data_meta\": {\"ID\": \"CVE-2022-23822\", \"STATE\": \"PUBLIC\", \"ASSIGNER\": \"psirt@amd.com\", \"DATE_PUBLIC\": \"2022-04-26T15:00:00.000Z\"}}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2023-20570\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-03-22T14:12:52.749Z\", \"dateReserved\": \"2022-10-27T18:53:39.754Z\", \"assignerOrgId\": \"b58fc414-a1e4-4f92-9d70-1add41838648\", \"datePublished\": \"2024-02-13T17:14:09.431Z\", \"assignerShortName\": \"AMD\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.