low3.3
CVE-2023-20570
Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentially load arbitrary bitstreams.
Impact
Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentially load arbitrary bitstreams.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Alveo U50 Firmware | All versions |
| Amd | Alveo U200 Firmware | All versions |
| Amd | Alveo U250 Firmware | All versions |
| Amd | Alveo U280 Firmware | All versions |
| Amd | Kintex Ultrascale\+ Ku3p Firmware | All versions |
| Amd | Kintex Ultrascale\+ Ku5p Firmware | All versions |
| Amd | Kintex Ultrascale\+ Ku9p Firmware | All versions |
| Amd | Kintex Ultrascale\+ Ku11p Firmware | All versions |
| Amd | Kintex Ultrascale\+ Ku13p Firmware | All versions |
| Amd | Kintex Ultrascale\+ Ku15p Firmware | All versions |
| Amd | Kintex Ultrascale\+ Ku19p Firmware | All versions |
| Amd | Kintex Ultrascale Ku025 Firmware | All versions |