CVE-2022-23822

🗓️ 27 Apr 2022 16:06:05Reported by AMDType

In physical attack, exploit Zynq-7000 SoC FSBL to load malicious image, leading to additional attacks. Anticipated mitigation via 2022.1 patch

Reporter	Title	Published	Views	Family All 6
ATTACKERKB	CVE-2022-23822	26 Apr 202215:00	–	attackerkb
CNNVD	Xilinx Zynq-7000 安全漏洞	27 Apr 202200:00	–	cnnvd
Cvelist	CVE-2022-23822	27 Apr 202216:06	–	cvelist
EUVD	EUVD-2022-28751	3 Oct 202520:07	–	euvd
NVD	CVE-2022-23822	27 Apr 202217:15	–	nvd
Prion	Authentication flaw	27 Apr 202217:15	–	prion

NVD

Node

xilinx zynq-7000s_firmwareRange<2022.1

AND

xilinx zynq-7000sMatch-

Node

xilinx zynq-7000_firmwareRange<2022.1

AND

xilinx zynq-7000Match-

[
  {
    "platforms": [
      "Zynq-7000 SoC FSBL"
    ],
    "product": "Zynq-7000 SoC FSBL",
    "vendor": "AMD-Xilinx",
    "versions": [
      {
        "lessThanOrEqual": "2022.1",
        "status": "affected",
        "version": "2021.2",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
github	www.github.com/Xilinx/embeddedsw/tree/master/lib/sw_apps/zynq_fsbl
support	www.support.xilinx.com/s/article/76974

21 Nov 2024 06:49Current

6.4Medium risk

Vulners AI Score6.4

CVSS 24.4

CVSS 3.16.8

EPSS0.00056

CWE-863