← Database

CVE-2023-20570

LOW CVSS: 3.3 Published: 2024-02-13 Modified: 2026-06-17

Description

Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentially load arbitrary bitstreams.

Affected Platforms

Amd Kintex Ultrascale Ku060 FirmwareAmd Kintex Ultrascale\+ Ku5PAmd Virtex Ultrascale\+ Vu47PAmd Kintex Ultrascale Ku025 FirmwareAmd Virtex Ultrascale\+ Vu31P FirmwareAmd Kintex Ultrascale\+ Ku15PAmd Alveo U250Amd Virtex Ultrascale Xcvu440 FirmwareAmd Virtex Ultrascale\+ Vu57PAmd Kintex Ultrascale\+ Ku3P Firmware

Weakness Type

CWE-345, CWE-345

References