CVE-2022-23822

2022-04-2716:06:05

CWE-863

AMD

www.cve.org

physical attack

zynq-7000 soc

first stage boot loader

authentication bypass

malicious image

decryption oracle

mitigation patch

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

29.7%

JSON

In this physical attack, an attacker may potentially exploit the Zynq-7000 SoC First Stage Boot Loader (FSBL) by bypassing authentication and loading a malicious image onto the device. This in turn may further allow the attacker to perform additional attacks such as such as using the device as a decryption oracle. An anticipated mitigation via a 2022.1 patch will resolve the issue.

CNA Affected

[
  {
    "platforms": [
      "Zynq-7000 SoC FSBL"
    ],
    "product": "Zynq-7000 SoC FSBL",
    "vendor": "AMD-Xilinx",
    "versions": [
      {
        "lessThanOrEqual": "2022.1",
        "status": "affected",
        "version": "2021.2",
        "versionType": "custom"
      }
    ]
  }
]