EUVD-2022-28751

Malicious code in bioql PyPI...

CVE-2022-23822

In this physical attack, an attacker may potentially exploit the Zynq-7000 SoC First Stage Boot Loader FSBL by bypassing authentication and loading a malicious image onto the device. This in turn may further allow the attacker to perform additional attacks such as such as using the device as a...

Authentication flaw

In this physical attack, an attacker may potentially exploit the Zynq-7000 SoC First Stage Boot Loader FSBL by bypassing authentication and loading a malicious image onto the device. This in turn may further allow the attacker to perform additional attacks such as such as using the device as a...

CVE-2022-23822

In this physical attack, an attacker may potentially exploit the Zynq-7000 SoC First Stage Boot Loader FSBL by bypassing authentication and loading a malicious image onto the device. This in turn may further allow the attacker to perform additional attacks such as such as using the device as a...

CVE-2022-23822

CVE-2022-23822 concerns the Zynq-7000 SoC First Stage Boot Loader (FSBL). A physical attack may bypass FSBL authentication and load a malicious image onto the device, enabling the attacker to perform further actions such as using the device as a decryption oracle. The NVD entry notes a mitigation...

CVE-2022-23822: Incorrect Authorization

In this physical attack, an attacker may potentially exploit the Zynq-7000 SoC First Stage Boot Loader FSBL by bypassing authentication and loading a malicious image onto the device. This in turn may further allow the attacker to perform additional attacks such as such as using the device as a...

PT-2022-16284

Name of the Vulnerable Software and Affected Versions Xilinx Zynq-7000 SoC affected versions not specified Description The issue concerns a physical attack where an attacker can potentially exploit the First Stage Boot Loader FSBL by bypassing authentication and loading a malicious image onto the...

CVE-2021-44850: Insufficient Verification of Data Authenticity

On Xilinx Zynq-7000 SoC devices, physical modification of an SD boot image allows for a buffer overflow attack in the ROM. Because the Zynq-7000's boot image header is unencrypted and unauthenticated before use, an attacker can modify the boot header stored on an SD card so that a secure image...

PT-2021-17323

Name of the Vulnerable Software and Affected Versions: Zynq-7000 SOC device affected versions not specified Description: The issue arises when booting a Zynq-7000 SOC device from nand flash memory. The nand driver in the ROM fails to validate inputs when reading parameters from the nand's paramet...