CVE-2019-5478

🗓️ 03 Sep 2019 19:17:35Reported by hackeroneType

Weakness in Encrypt Only boot mode in Zynq UltraScale+ devices, leading to potential control field modification and incorrect secure boot behavior

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2019-5478	3 Sep 201919:17	–	cvelist
EUVD	EUVD-2019-15058	7 Oct 202500:30	–	euvd
NVD	CVE-2019-5478	3 Sep 201920:15	–	nvd
Prion	Design/Logic Flaw	3 Sep 201920:15	–	prion
Positive Technologies	PT-2019-17698 · Xilinx · Xilinx Zynq Ultrascale+	3 Sep 201900:00	–	ptsecurity
RedhatCVE	CVE-2019-5478	22 May 202508:42	–	redhatcve

NVD

Node

amd zu11eg_firmwareMatch-

AND

amd zu11egMatch-

Node

amd zu15eg_firmwareMatch-

AND

amd zu15egMatch-

Node

amd zu17eg_firmwareMatch-

AND

amd zu17egMatch-

Node

amd zu19eg_firmwareMatch-

AND

amd zu19egMatch-

Node

amd zu1cg_firmwareMatch-

AND

amd zu1cgMatch-

Node

amd zu1eg_firmwareMatch-

AND

amd zu1egMatch-

Node

amd zu21dr_firmwareMatch-

AND

amd zu21drMatch-

Node

amd zu25dr_firmwareMatch-

AND

amd zu25drMatch-

Node

amd zu27dr_firmwareMatch-

AND

amd zu27drMatch-

Node

amd zu28dr_firmwareMatch-

AND

amd zu28drMatch-

Node

amd zu29dr_firmwareMatch-

AND

amd zu29drMatch-

Node

amd zu2cg_firmwareMatch-

AND

amd zu2cgMatch-

Node

amd zu2eg_firmwareMatch-

AND

amd zu2egMatch-

Node

amd zu39dr_firmwareMatch-

AND

amd zu39drMatch-

Node

amd zu3cg_firmwareMatch-

AND

amd zu3cgMatch-

Node

amd zu3eg_firmwareMatch-

AND

amd zu3egMatch-

Node

amd zu3tcg_firmwareMatch-

AND

amd zu3tcgMatch-

Node

amd zu3teg_firmwareMatch-

AND

amd zu3tegMatch-

Node

amd zu42dr_firmwareMatch-

AND

amd zu42drMatch-

Node

amd zu43dr_firmwareMatch-

AND

amd zu43drMatch-

Node

amd zu46dr_firmwareMatch-

AND

amd zu46drMatch-

Node

amd zu47dr_firmwareMatch-

AND

amd zu47drMatch-

Node

amd zu48dr_firmwareMatch-

AND

amd zu48drMatch-

Node

amd zu49dr_firmwareMatch-

AND

amd zu49drMatch-

Node

amd zu4cg_firmwareMatch-

AND

amd zu4cgMatch-

Node

amd zu4eg_firmwareMatch-

AND

amd zu4egMatch-

Node

amd zu4ev_firmwareMatch-

AND

amd zu4evMatch-

Node

amd zu5cg_firmwareMatch-

AND

amd zu5cgMatch-

Node

amd zu5eg_firmwareMatch-

AND

amd zu5egMatch-

Node

amd zu5ev_firmwareMatch-

AND

amd zu5evMatch-

Node

amd zu63dr_firmwareMatch-

AND

amd zu63drMatch-

Node

amd zu64dr_firmwareMatch-

AND

amd zu64drMatch-

Node

amd zu65dr_firmwareMatch-

AND

amd zu65drMatch-

Node

amd zu67dr_firmwareMatch-

AND

amd zu67drMatch-

Node

amd zu6cg_firmwareMatch-

AND

amd zu6cgMatch-

Node

amd zu6eg_firmwareMatch-

AND

amd zu6egMatch-

Node

amd zu7cg_firmwareMatch-

AND

amd zu7cgMatch-

Node

amd zu7eg_firmwareMatch-

AND

amd zu7egMatch-

Node

amd zu7ev_firmwareMatch-

AND

amd zu7evMatch-

Node

amd zu9cg_firmwareMatch-

AND

amd zu9cgMatch-

Node

amd zu9eg_firmwareMatch-

AND

amd zu9egMatch-

[
  {
    "product": "Zynq UltraScale+ SoC",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Not Fixed"
      }
    ]
  }
]

Source	Link
github	www.github.com/inversepath/advisories/blob/master/Security_Advisory-Ref_FSC-HWSEC-VR2019-0001-Xilinx_ZU+-Encrypt_Only_Secure_Boot_bypass.txt
xilinx	www.xilinx.com/support/answers/72588.html

27 Nov 2024 16:10Current

5.4Medium risk

Vulners AI Score5.4

CVSS 22.1

CVSS 3.15.5

EPSS0.00024

zynq ultrascale+encrypt only boot mode weakness control field modification secure boot behavior nvd cve-2019-5478