CVE-2023-20570 (GCVE-0-2023-20570)
Vulnerability from cvelistv5 – Published: 2024-02-13 17:14 – Updated: 2025-03-22 14:12
VLAI
EPSS
VEX
Summary
Insufficient verification of data authenticity in
the configuration state machine may allow a local attacker to potentially load
arbitrary bitstreams.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-02-14 15:49 UTC
CWE
- CWE-345 - Insufficient Verification of Data Authenticity
Assigner
References
1 reference
Impacted products
6 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| AMD | Alveo™ Card (UltraScale™and UltraScale+™ based) |
Affected:
all
|
guessed | |
| AMD | Kintex™ UltraScale™ FPGA |
Affected:
all
|
guessed | |
| AMD | Virtex™ UltraScale™ FPGA |
Affected:
all
|
guessed | |
| AMD | Kintex™UltraScale+™ FPGA |
Affected:
all
|
guessed | |
| AMD | Virtex™ UltraScale+™FPGA |
Affected:
all
|
guessed | |
| AMD | Artix™ UltraScale+™ FPGA |
Affected:
all
|
guessed |
Date Public
2024-02-13 17:00
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2023-20570",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-02-14T15:49:13.872018Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-345",
"description": "CWE-345 Insufficient Verification of Data Authenticity",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-03-22T14:12:52.749Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T09:05:36.265Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Alveo\u2122 Card (UltraScale\u2122and UltraScale+\u2122 based)",
"vendor": "AMD",
"versions": [
{
"status": "affected",
"version": "all"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Kintex\u2122 UltraScale\u2122 FPGA",
"vendor": "AMD",
"versions": [
{
"status": "affected",
"version": "all"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Virtex\u2122 UltraScale\u2122 FPGA",
"vendor": "AMD",
"versions": [
{
"status": "affected",
"version": "all"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Kintex\u2122UltraScale+\u2122 FPGA",
"vendor": "AMD",
"versions": [
{
"status": "affected",
"version": "all"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Virtex\u2122 UltraScale+\u2122FPGA",
"vendor": "AMD",
"versions": [
{
"status": "affected",
"version": "all"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Artix\u2122 UltraScale+\u2122 FPGA",
"vendor": "AMD",
"versions": [
{
"status": "affected",
"version": "all"
}
]
}
],
"datePublic": "2024-02-13T17:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eInsufficient verification of data authenticity in\nthe configuration state machine may allow a local attacker to potentially load\narbitrary bitstreams.\n\n\n\n\u003c/p\u003e"
}
],
"value": "Insufficient verification of data authenticity in\nthe configuration state machine may allow a local attacker to potentially load\narbitrary bitstreams.\n\n\n\n\n\n"
}
],
"providerMetadata": {
"dateUpdated": "2024-02-13T17:14:09.431Z",
"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
"shortName": "AMD"
},
"references": [
{
"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002.html"
}
],
"source": {
"advisory": "AMD-SB-8002",
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@amd.com",
"DATE_PUBLIC": "2022-04-26T15:00:00.000Z",
"ID": "CVE-2022-23822",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Zynq-7000 SoC FSBL",
"version": {
"version_data": [
{
"platform": "Zynq-7000 SoC FSBL",
"version_affected": "\u003c=",
"version_name": "2021.2",
"version_value": "2022.1"
}
]
}
}
]
},
"vendor_name": "AMD-Xilinx"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "In this physical attack, an attacker may potentially exploit the Zynq-7000 SoC First Stage Boot Loader (FSBL) by bypassing authentication and loading a malicious image onto the device. This in turn may further allow the attacker to perform additional attacks such as such as using the device as a decryption oracle. An anticipated mitigation via a 2022.1 patch will resolve the issue."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-863 Incorrect Authorization"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://support.xilinx.com/s/article/76974",
"refsource": "MISC",
"url": "https://support.xilinx.com/s/article/76974"
},
{
"name": "https://github.com/Xilinx/embeddedsw/tree/master/lib/sw_apps/zynq_fsbl",
"refsource": "MISC",
"url": "https://github.com/Xilinx/embeddedsw/tree/master/lib/sw_apps/zynq_fsbl"
}
]
},
"source": {
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
"assignerShortName": "AMD",
"cveId": "CVE-2023-20570",
"datePublished": "2024-02-13T17:14:09.431Z",
"dateReserved": "2022-10-27T18:53:39.754Z",
"dateUpdated": "2025-03-22T14:12:52.749Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2023-20570",
"date": "2026-10-03",
"epss": "0.00102",
"percentile": "0.00877"
},
"fkie_nvd": {
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:alveo_u50_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FE3084B4-F4E8-4975-9099-A15F205A8C26",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:alveo_u50:-:*:*:*:*:*:*:*",
"matchCriteriaId": "57C8F59B-E976-431F-AAEB-7AB01F026968",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:alveo_u200_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "27371539-A727-4B2D-AB8D-D63CFAE9377E",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:alveo_u200:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6D56FAF7-CFF4-49D9-BCF5-37D09AF6524A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:alveo_u250_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "558BA7D5-222E-4F72-9540-55C33C4CFBED",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:alveo_u250:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F3384644-531A-42D5-ADB0-2F936EAB6A5C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:alveo_u280_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "145D4F5F-42C8-4AF7-AE43-73B13EB96751",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:alveo_u280:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0F60242D-3205-4B99-9B9F-78F12F097D4A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:kintex_ultrascale\\+_ku3p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D7CC5828-0BB1-4F85-BE47-F776DCA3EAA5",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:kintex_ultrascale\\+_ku3p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C3A976D3-01FA-4404-8901-8FE7185F8B9F",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:kintex_ultrascale\\+_ku5p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "456B87C9-4AD6-4FD6-8908-3295E5B80ABB",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:kintex_ultrascale\\+_ku5p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3E078E0A-5595-4F6B-A884-65270D679416",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:kintex_ultrascale\\+_ku9p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6239967B-6E07-4893-A829-9F5C263199D0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:kintex_ultrascale\\+_ku9p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DDF501E6-6CC8-428F-BF86-890DD686DA3D",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:kintex_ultrascale\\+_ku11p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FDFF0325-B464-45D5-81B1-293E2CE46CD6",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:kintex_ultrascale\\+_ku11p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4F226691-737E-4C02-9CBB-61AF1401A422",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:kintex_ultrascale\\+_ku13p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A6AB870D-72B7-4ACE-883C-8D1162D13021",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:kintex_ultrascale\\+_ku13p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7C8DCE48-CA5B-4F6C-9A63-A3E733DB7C20",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:kintex_ultrascale\\+_ku15p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0F821EFE-9F3F-408C-B80B-90E49810D7EB",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:kintex_ultrascale\\+_ku15p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E54BC7A7-64E4-4B3D-8334-F96B40374AE3",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:kintex_ultrascale\\+_ku19p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3A9A8A1B-0E1D-41D4-9085-B31AD8BE8200",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:kintex_ultrascale\\+_ku19p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "72E647CC-D0FB-4711-ACB4-E797F97F9F51",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:kintex_ultrascale_ku025_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B26E5FEA-216A-4C24-9AD4-32D242395634",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:kintex_ultrascale_ku025:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E1A983BA-3058-4691-B9AE-D397DF6B47A8",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:kintex_ultrascale_ku035_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C6B8A33A-C11E-42B7-A288-9C1DD972C1B9",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:kintex_ultrascale_ku035:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CD1133C9-0555-4546-8345-464ADA900D67",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:kintex_ultrascale_ku040_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "36C99A12-D71D-42DD-8AE5-1464FCD672B1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:kintex_ultrascale_ku040:-:*:*:*:*:*:*:*",
"matchCriteriaId": "52CFF343-FFF5-4D58-98BF-6805DC42B6DC",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:kintex_ultrascale_ku060_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "19BDCF66-53F1-4157-B778-6626B9EC4D45",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:kintex_ultrascale_ku060:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0A4D8B64-2BDA-44A1-84BB-E3326AD620D3",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:kintex_ultrascale_ku085_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AF604946-58CB-4AFC-A955-1BBE9FDD666F",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:kintex_ultrascale_ku085:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EF3EF9C5-3EBD-42C6-B4A6-8C5A5A445167",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:kintex_ultrascale_ku095_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E79ED60A-A332-4A31-8E58-DB410377F7E3",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:kintex_ultrascale_ku095:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CA865FE0-F41E-4478-9876-338D77624736",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:kintex_ultrascale_ku115_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E6CF7C22-D116-41BC-9CB1-6EC6ACCAC094",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:kintex_ultrascale_ku115:-:*:*:*:*:*:*:*",
"matchCriteriaId": "306D2B25-5267-4681-B3AB-9374731BDEF1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale_xcvu065_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BE9AD5DF-956D-46A8-9ACC-B0314EEF9687",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale_xcvu065:-:*:*:*:*:*:*:*",
"matchCriteriaId": "ADA2BDE1-59C6-46D9-A44E-05157582D102",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale_xcvu080_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5CEA10CD-C183-4ACF-A7AD-B5CC257C9297",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale_xcvu080:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F00DEE45-B1D8-4A12-B69E-C38DD88F7905",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale_xcvu095_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "88B1B3EB-46C9-460C-B6F2-3D10A1658AE5",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale_xcvu095:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2167361-8B7F-451A-B8BC-C5838DBE60B6",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale_xcvu125_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "507D06CE-159D-4B27-9044-659029483B63",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale_xcvu125:-:*:*:*:*:*:*:*",
"matchCriteriaId": "92B7BAF0-FE74-4E90-8836-44E17A6593D3",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale_xcvu160_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "92F26815-1E71-4DE9-9E99-4E8E5F3180AD",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale_xcvu160:-:*:*:*:*:*:*:*",
"matchCriteriaId": "012095A7-4BE9-44AC-99D5-910EBDACE94D",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale_xcvu190_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A44E3CD8-DE16-4FB9-B013-1D72C8CB7798",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale_xcvu190:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EA7D6A1D-DA77-4614-9C8A-A53678614E31",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale_xcvu440_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7D3A3078-9F89-47D4-B538-79166DB14880",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale_xcvu440:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E8ACC94A-67F4-41EC-8D38-8D1F754A5082",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu3p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "45BEDBCC-7A2B-4763-9F31-CF5F613719F2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu3p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "45AA8115-3295-415A-9C28-B0B7B6103A9E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu5p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "883039DE-36C8-4039-87C2-667511C40B2E",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu5p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "77C94F1F-D12B-425B-9CA3-620A32394B01",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu7p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F7F9EEF9-6DA8-4396-919C-00D433B0817A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu7p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4250BFEC-BC27-4E49-8356-6CBCC750062D",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu9p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E5525647-CEC9-49DC-9BE6-2EF4AA1C20D8",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu9p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FCEB725B-51D4-415C-9B8A-75D9F8B5797B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu11p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2A22FB3F-B742-461D-9E4C-C363EE88AF4E",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu11p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "30BD42BF-7DAC-4E7A-BAF4-928C78DD7F62",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu13p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E4B69466-5EC8-4CA4-8402-E352EBAD55A5",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu13p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5614CECE-4002-4A26-9D11-1AE0EF920616",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu19p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "915ACC02-696E-4E98-9163-33698E71675E",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu19p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A5FC847B-58E9-495E-9A34-968040909D2E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu23p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4BBCB6D8-A988-4084-8AF1-DFBB0D818270",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu23p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DE9512DE-DCD8-483F-832C-1CE464E209E0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu27p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5428B305-A5C5-461D-B992-DB5A967B13FB",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu27p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DF9047FE-8E7D-4F22-903E-F77042A407DB",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu29p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "16354B52-EB87-48B9-9986-6F78A82837C2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu29p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "59E49C38-696F-4CA1-9314-787F5AF5A5F3",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu31p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C9091492-205A-43BD-991E-931CB5C4E3FD",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu31p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A346B590-0809-4A85-988B-EF32D866BDAC",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu33p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DB473A6A-C1D1-4810-A4DB-C791B9F22187",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu33p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BFD6516F-9F71-4073-A38A-F16430C60567",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu35p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B1456CAF-52C0-49A9-BE66-41F7A72E7919",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu35p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F7E97A0A-7325-4A26-A1F7-0CDE6C4A5442",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu37p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DD9872B4-31D5-4ACD-A0CE-833343223ED4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu37p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9CDAC404-93FE-4277-9994-74F25DF9CB1B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu45p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1C209441-61ED-403E-BCD4-DB3444CD90F5",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu45p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "19764E64-16D9-414A-B0EA-5993C0C365A9",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu47p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DDF08DB4-165B-4EBC-90D7-022DEF7393BF",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu47p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "786E9CE1-2311-4A53-A4AB-F194BEA84E3A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu57p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FD7A47E7-C80C-4448-9FEB-04BC3829FFDE",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu57p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "103CC10B-695B-4072-BE5F-99366DC8694B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:artix_ultrascale\\+_au7p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4F832541-95DD-4132-B8FA-F6C81AECF797",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:artix_ultrascale\\+_au7p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3CE22147-BB84-4251-8558-4450B330A038",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:artix_ultrascale\\+_au10p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B2BB62A9-7C0E-4739-B857-E142C9EEA3AF",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:artix_ultrascale\\+_au10p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AE2205FF-381F-4AA9-9B7C-1FD43DCC3C55",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:artix_ultrascale\\+_au15p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6ADE1C80-BE11-45E6-87A9-048F203915E9",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:artix_ultrascale\\+_au15p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "46D644F3-DC4F-48EE-AF84-714C3AE887B1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:artix_ultrascale\\+_au20p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5D547420-70A4-4C71-9637-CE3DD54A8C84",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:artix_ultrascale\\+_au20p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "24A055B7-661F-4B00-922E-1761B4F51D33",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:artix_ultrascale\\+_au25p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A729C913-B41C-414E-8FB2-81D5E158A949",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:artix_ultrascale\\+_au25p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BDD539D3-CAFA-40E5-9381-F25E7D99622B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"descriptions": [
{
"lang": "en",
"value": "Insufficient verification of data authenticity in\nthe configuration state machine may allow a local attacker to potentially load\narbitrary bitstreams.\n\n\n\n\n\n"
},
{
"lang": "es",
"value": "Una verificaci\u00f3n insuficiente de la autenticidad de los datos en la m\u00e1quina de estado de configuraci\u00f3n puede permitir que un atacante local cargue potencialmente flujos de bits arbitrarios."
}
],
"id": "CVE-2023-20570",
"lastModified": "2024-11-21T07:41:08.820",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 1.4,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2024-02-13T18:15:47.233",
"references": [
{
"source": "psirt@amd.com",
"tags": [
"Vendor Advisory"
],
"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002.html"
}
],
"sourceIdentifier": "psirt@amd.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-345"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"nvd": {
"cve": {
"affected": [
{
"affectedData": [
{
"defaultStatus": "unaffected",
"product": "Alveo\u2122 Card (UltraScale\u2122and UltraScale+\u2122 based)",
"vendor": "AMD",
"versions": [
{
"status": "affected",
"version": "all"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Kintex\u2122 UltraScale\u2122 FPGA",
"vendor": "AMD",
"versions": [
{
"status": "affected",
"version": "all"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Virtex\u2122 UltraScale\u2122 FPGA",
"vendor": "AMD",
"versions": [
{
"status": "affected",
"version": "all"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Kintex\u2122UltraScale+\u2122 FPGA",
"vendor": "AMD",
"versions": [
{
"status": "affected",
"version": "all"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Virtex\u2122 UltraScale+\u2122FPGA",
"vendor": "AMD",
"versions": [
{
"status": "affected",
"version": "all"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Artix\u2122 UltraScale+\u2122 FPGA",
"vendor": "AMD",
"versions": [
{
"status": "affected",
"version": "all"
}
]
}
],
"source": "psirt@amd.com"
}
],
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:alveo_u50_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FE3084B4-F4E8-4975-9099-A15F205A8C26",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:alveo_u50:-:*:*:*:*:*:*:*",
"matchCriteriaId": "57C8F59B-E976-431F-AAEB-7AB01F026968",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:alveo_u200_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "27371539-A727-4B2D-AB8D-D63CFAE9377E",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:alveo_u200:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6D56FAF7-CFF4-49D9-BCF5-37D09AF6524A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:alveo_u250_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "558BA7D5-222E-4F72-9540-55C33C4CFBED",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:alveo_u250:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F3384644-531A-42D5-ADB0-2F936EAB6A5C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:alveo_u280_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "145D4F5F-42C8-4AF7-AE43-73B13EB96751",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:alveo_u280:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0F60242D-3205-4B99-9B9F-78F12F097D4A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:kintex_ultrascale\\+_ku3p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D7CC5828-0BB1-4F85-BE47-F776DCA3EAA5",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:kintex_ultrascale\\+_ku3p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C3A976D3-01FA-4404-8901-8FE7185F8B9F",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:kintex_ultrascale\\+_ku5p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "456B87C9-4AD6-4FD6-8908-3295E5B80ABB",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:kintex_ultrascale\\+_ku5p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3E078E0A-5595-4F6B-A884-65270D679416",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:kintex_ultrascale\\+_ku9p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6239967B-6E07-4893-A829-9F5C263199D0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:kintex_ultrascale\\+_ku9p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DDF501E6-6CC8-428F-BF86-890DD686DA3D",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:kintex_ultrascale\\+_ku11p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FDFF0325-B464-45D5-81B1-293E2CE46CD6",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:kintex_ultrascale\\+_ku11p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4F226691-737E-4C02-9CBB-61AF1401A422",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:kintex_ultrascale\\+_ku13p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A6AB870D-72B7-4ACE-883C-8D1162D13021",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:kintex_ultrascale\\+_ku13p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7C8DCE48-CA5B-4F6C-9A63-A3E733DB7C20",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:kintex_ultrascale\\+_ku15p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0F821EFE-9F3F-408C-B80B-90E49810D7EB",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:kintex_ultrascale\\+_ku15p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E54BC7A7-64E4-4B3D-8334-F96B40374AE3",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:kintex_ultrascale\\+_ku19p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3A9A8A1B-0E1D-41D4-9085-B31AD8BE8200",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:kintex_ultrascale\\+_ku19p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "72E647CC-D0FB-4711-ACB4-E797F97F9F51",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:kintex_ultrascale_ku025_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B26E5FEA-216A-4C24-9AD4-32D242395634",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:kintex_ultrascale_ku025:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E1A983BA-3058-4691-B9AE-D397DF6B47A8",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:kintex_ultrascale_ku035_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C6B8A33A-C11E-42B7-A288-9C1DD972C1B9",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:kintex_ultrascale_ku035:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CD1133C9-0555-4546-8345-464ADA900D67",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:kintex_ultrascale_ku040_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "36C99A12-D71D-42DD-8AE5-1464FCD672B1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:kintex_ultrascale_ku040:-:*:*:*:*:*:*:*",
"matchCriteriaId": "52CFF343-FFF5-4D58-98BF-6805DC42B6DC",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:kintex_ultrascale_ku060_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "19BDCF66-53F1-4157-B778-6626B9EC4D45",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:kintex_ultrascale_ku060:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0A4D8B64-2BDA-44A1-84BB-E3326AD620D3",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:kintex_ultrascale_ku085_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AF604946-58CB-4AFC-A955-1BBE9FDD666F",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:kintex_ultrascale_ku085:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EF3EF9C5-3EBD-42C6-B4A6-8C5A5A445167",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:kintex_ultrascale_ku095_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E79ED60A-A332-4A31-8E58-DB410377F7E3",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:kintex_ultrascale_ku095:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CA865FE0-F41E-4478-9876-338D77624736",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:kintex_ultrascale_ku115_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E6CF7C22-D116-41BC-9CB1-6EC6ACCAC094",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:kintex_ultrascale_ku115:-:*:*:*:*:*:*:*",
"matchCriteriaId": "306D2B25-5267-4681-B3AB-9374731BDEF1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale_xcvu065_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BE9AD5DF-956D-46A8-9ACC-B0314EEF9687",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale_xcvu065:-:*:*:*:*:*:*:*",
"matchCriteriaId": "ADA2BDE1-59C6-46D9-A44E-05157582D102",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale_xcvu080_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5CEA10CD-C183-4ACF-A7AD-B5CC257C9297",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale_xcvu080:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F00DEE45-B1D8-4A12-B69E-C38DD88F7905",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale_xcvu095_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "88B1B3EB-46C9-460C-B6F2-3D10A1658AE5",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale_xcvu095:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2167361-8B7F-451A-B8BC-C5838DBE60B6",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale_xcvu125_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "507D06CE-159D-4B27-9044-659029483B63",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale_xcvu125:-:*:*:*:*:*:*:*",
"matchCriteriaId": "92B7BAF0-FE74-4E90-8836-44E17A6593D3",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale_xcvu160_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "92F26815-1E71-4DE9-9E99-4E8E5F3180AD",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale_xcvu160:-:*:*:*:*:*:*:*",
"matchCriteriaId": "012095A7-4BE9-44AC-99D5-910EBDACE94D",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale_xcvu190_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A44E3CD8-DE16-4FB9-B013-1D72C8CB7798",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale_xcvu190:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EA7D6A1D-DA77-4614-9C8A-A53678614E31",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale_xcvu440_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7D3A3078-9F89-47D4-B538-79166DB14880",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale_xcvu440:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E8ACC94A-67F4-41EC-8D38-8D1F754A5082",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu3p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "45BEDBCC-7A2B-4763-9F31-CF5F613719F2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu3p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "45AA8115-3295-415A-9C28-B0B7B6103A9E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu5p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "883039DE-36C8-4039-87C2-667511C40B2E",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu5p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "77C94F1F-D12B-425B-9CA3-620A32394B01",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu7p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F7F9EEF9-6DA8-4396-919C-00D433B0817A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu7p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4250BFEC-BC27-4E49-8356-6CBCC750062D",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu9p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E5525647-CEC9-49DC-9BE6-2EF4AA1C20D8",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu9p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FCEB725B-51D4-415C-9B8A-75D9F8B5797B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu11p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2A22FB3F-B742-461D-9E4C-C363EE88AF4E",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu11p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "30BD42BF-7DAC-4E7A-BAF4-928C78DD7F62",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu13p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E4B69466-5EC8-4CA4-8402-E352EBAD55A5",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu13p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5614CECE-4002-4A26-9D11-1AE0EF920616",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu19p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "915ACC02-696E-4E98-9163-33698E71675E",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu19p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A5FC847B-58E9-495E-9A34-968040909D2E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu23p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4BBCB6D8-A988-4084-8AF1-DFBB0D818270",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu23p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DE9512DE-DCD8-483F-832C-1CE464E209E0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu27p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5428B305-A5C5-461D-B992-DB5A967B13FB",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu27p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DF9047FE-8E7D-4F22-903E-F77042A407DB",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu29p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "16354B52-EB87-48B9-9986-6F78A82837C2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu29p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "59E49C38-696F-4CA1-9314-787F5AF5A5F3",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu31p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C9091492-205A-43BD-991E-931CB5C4E3FD",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu31p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A346B590-0809-4A85-988B-EF32D866BDAC",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu33p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DB473A6A-C1D1-4810-A4DB-C791B9F22187",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu33p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BFD6516F-9F71-4073-A38A-F16430C60567",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu35p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B1456CAF-52C0-49A9-BE66-41F7A72E7919",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu35p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F7E97A0A-7325-4A26-A1F7-0CDE6C4A5442",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu37p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DD9872B4-31D5-4ACD-A0CE-833343223ED4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu37p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9CDAC404-93FE-4277-9994-74F25DF9CB1B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu45p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1C209441-61ED-403E-BCD4-DB3444CD90F5",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu45p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "19764E64-16D9-414A-B0EA-5993C0C365A9",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu47p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DDF08DB4-165B-4EBC-90D7-022DEF7393BF",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu47p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "786E9CE1-2311-4A53-A4AB-F194BEA84E3A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:virtex_ultrascale\\+_vu57p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FD7A47E7-C80C-4448-9FEB-04BC3829FFDE",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:virtex_ultrascale\\+_vu57p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "103CC10B-695B-4072-BE5F-99366DC8694B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:artix_ultrascale\\+_au7p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4F832541-95DD-4132-B8FA-F6C81AECF797",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:artix_ultrascale\\+_au7p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3CE22147-BB84-4251-8558-4450B330A038",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:artix_ultrascale\\+_au10p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B2BB62A9-7C0E-4739-B857-E142C9EEA3AF",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:artix_ultrascale\\+_au10p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AE2205FF-381F-4AA9-9B7C-1FD43DCC3C55",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:artix_ultrascale\\+_au15p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6ADE1C80-BE11-45E6-87A9-048F203915E9",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:artix_ultrascale\\+_au15p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "46D644F3-DC4F-48EE-AF84-714C3AE887B1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:artix_ultrascale\\+_au20p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5D547420-70A4-4C71-9637-CE3DD54A8C84",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:artix_ultrascale\\+_au20p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "24A055B7-661F-4B00-922E-1761B4F51D33",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:artix_ultrascale\\+_au25p_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A729C913-B41C-414E-8FB2-81D5E158A949",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:artix_ultrascale\\+_au25p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BDD539D3-CAFA-40E5-9381-F25E7D99622B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Insufficient verification of data authenticity in\nthe configuration state machine may allow a local attacker to potentially load\narbitrary bitstreams.\n\n\n\n\n\n"
},
{
"lang": "es",
"value": "Una verificaci\u00f3n insuficiente de la autenticidad de los datos en la m\u00e1quina de estado de configuraci\u00f3n puede permitir que un atacante local cargue potencialmente flujos de bits arbitrarios."
}
],
"id": "CVE-2023-20570",
"lastModified": "2026-06-17T05:30:20.227",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 1.4,
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 1.4,
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2023-20570",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-02-14T15:49:13.872018Z",
"version": "2.0.3"
}
}
]
},
"published": "2024-02-13T18:15:47.233",
"references": [
{
"source": "psirt@amd.com",
"tags": [
"Vendor Advisory"
],
"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002.html"
}
],
"sourceIdentifier": "psirt@amd.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-345"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-345"
}
],
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
}
},
"redhat_vex": {
"current_release_date": "2025-05-28T23:29:06+00:00",
"cve": "CVE-2023-20570",
"id": "CVE-2023-20570",
"initial_release_date": "2023-01-01T00:00:00+00:00",
"product_status:known_not_affected": "1",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "CVE-2023-20570",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-20570.json",
"version": "3"
},
"vulnrichment": {
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T09:05:36.265Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002.html"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2023-20570",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-02-14T15:49:13.872018Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-345",
"description": "CWE-345 Insufficient Verification of Data Authenticity",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-05-23T19:01:11.372Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Alveo\u2122 Card (UltraScale\u2122and UltraScale+\u2122 based)",
"vendor": "AMD",
"versions": [
{
"status": "affected",
"version": "all"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Kintex\u2122 UltraScale\u2122 FPGA",
"vendor": "AMD",
"versions": [
{
"status": "affected",
"version": "all"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Virtex\u2122 UltraScale\u2122 FPGA",
"vendor": "AMD",
"versions": [
{
"status": "affected",
"version": "all"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Kintex\u2122UltraScale+\u2122 FPGA",
"vendor": "AMD",
"versions": [
{
"status": "affected",
"version": "all"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Virtex\u2122 UltraScale+\u2122FPGA",
"vendor": "AMD",
"versions": [
{
"status": "affected",
"version": "all"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Artix\u2122 UltraScale+\u2122 FPGA",
"vendor": "AMD",
"versions": [
{
"status": "affected",
"version": "all"
}
]
}
],
"datePublic": "2024-02-13T17:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eInsufficient verification of data authenticity in\nthe configuration state machine may allow a local attacker to potentially load\narbitrary bitstreams.\n\n\n\n\u003c/p\u003e"
}
],
"value": "Insufficient verification of data authenticity in\nthe configuration state machine may allow a local attacker to potentially load\narbitrary bitstreams.\n\n\n\n\n\n"
}
],
"providerMetadata": {
"dateUpdated": "2024-02-13T17:14:09.431Z",
"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
"shortName": "AMD"
},
"references": [
{
"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002.html"
}
],
"source": {
"advisory": "AMD-SB-8002",
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@amd.com",
"DATE_PUBLIC": "2022-04-26T15:00:00.000Z",
"ID": "CVE-2022-23822",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Zynq-7000 SoC FSBL",
"version": {
"version_data": [
{
"platform": "Zynq-7000 SoC FSBL",
"version_affected": "\u003c=",
"version_name": "2021.2",
"version_value": "2022.1"
}
]
}
}
]
},
"vendor_name": "AMD-Xilinx"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "In this physical attack, an attacker may potentially exploit the Zynq-7000 SoC First Stage Boot Loader (FSBL) by bypassing authentication and loading a malicious image onto the device. This in turn may further allow the attacker to perform additional attacks such as such as using the device as a decryption oracle. An anticipated mitigation via a 2022.1 patch will resolve the issue."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-863 Incorrect Authorization"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://support.xilinx.com/s/article/76974",
"refsource": "MISC",
"url": "https://support.xilinx.com/s/article/76974"
},
{
"name": "https://github.com/Xilinx/embeddedsw/tree/master/lib/sw_apps/zynq_fsbl",
"refsource": "MISC",
"url": "https://github.com/Xilinx/embeddedsw/tree/master/lib/sw_apps/zynq_fsbl"
}
]
},
"source": {
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
"assignerShortName": "AMD",
"cveId": "CVE-2023-20570",
"datePublished": "2024-02-13T17:14:09.431Z",
"dateReserved": "2022-10-27T18:53:39.754Z",
"dateUpdated": "2025-03-22T14:12:52.749Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…