CVE-2023-20570

2024-02-1317:14:09

AMD

github.com

data authenticity

configuration state machine

local attacker

arbitrary bitstreams

AI Score

6.6

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Insufficient verification of data authenticity in
the configuration state machine may allow a local attacker to potentially load
arbitrary bitstreams.

CNA Affected

[
  {
    "vendor": "AMD",
    "product": "Alveo™ Card (UltraScale™and UltraScale+™ based)",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "AMD",
    "product": "Kintex™ UltraScale™ FPGA",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "AMD",
    "product": "Virtex™ UltraScale™ FPGA",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "AMD",
    "product": "Kintex™UltraScale+™ FPGA",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "AMD",
    "product": "Virtex™ UltraScale+™FPGA",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "AMD",
    "product": "Artix™ UltraScale+™ FPGA",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ],
    "defaultStatus": "unaffected"
  }
]