CVE-2019-5478 : A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This

A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an adversary being able to modify the control fields of the boot image leading to an incorrect secure boot behavior.

Published 2019-09-03 20:15:12

Updated 2024-11-27 16:10:16

Source HackerOne

View at NVD, CVE.org

Products affected by CVE-2019-5478

AMD » Zu11eg Firmware » Version: N/A
cpe:2.3:o:amd:zu11eg_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu11eg » Version: N/A
AMD » Zu15eg Firmware » Version: N/A
cpe:2.3:o:amd:zu15eg_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu15eg » Version: N/A
AMD » Zu17eg Firmware » Version: N/A
cpe:2.3:o:amd:zu17eg_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu17eg » Version: N/A
AMD » Zu19eg Firmware » Version: N/A
cpe:2.3:o:amd:zu19eg_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu19eg » Version: N/A
AMD » Zu1cg Firmware » Version: N/A
cpe:2.3:o:amd:zu1cg_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu1cg » Version: N/A
AMD » Zu1eg Firmware » Version: N/A
cpe:2.3:o:amd:zu1eg_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu1eg » Version: N/A
AMD » Zu21dr Firmware » Version: N/A
cpe:2.3:o:amd:zu21dr_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu21dr » Version: N/A
AMD » Zu25dr Firmware » Version: N/A
cpe:2.3:o:amd:zu25dr_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu25dr » Version: N/A
AMD » Zu27dr Firmware » Version: N/A
cpe:2.3:o:amd:zu27dr_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu27dr » Version: N/A
AMD » Zu28dr Firmware » Version: N/A
cpe:2.3:o:amd:zu28dr_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu28dr » Version: N/A
AMD » Zu29dr Firmware » Version: N/A
cpe:2.3:o:amd:zu29dr_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu29dr » Version: N/A
AMD » Zu2cg Firmware » Version: N/A
cpe:2.3:o:amd:zu2cg_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu2cg » Version: N/A
AMD » Zu2eg Firmware » Version: N/A
cpe:2.3:o:amd:zu2eg_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu2eg » Version: N/A
AMD » Zu39dr Firmware » Version: N/A
cpe:2.3:o:amd:zu39dr_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu39dr » Version: N/A
AMD » Zu3cg Firmware » Version: N/A
cpe:2.3:o:amd:zu3cg_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu3cg » Version: N/A
AMD » Zu3eg Firmware » Version: N/A
cpe:2.3:o:amd:zu3eg_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu3eg » Version: N/A
AMD » Zu3tcg Firmware » Version: N/A
cpe:2.3:o:amd:zu3tcg_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu3tcg » Version: N/A
AMD » Zu3teg Firmware » Version: N/A
cpe:2.3:o:amd:zu3teg_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu3teg » Version: N/A
AMD » Zu42dr Firmware » Version: N/A
cpe:2.3:o:amd:zu42dr_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu42dr » Version: N/A
AMD » Zu43dr Firmware » Version: N/A
cpe:2.3:o:amd:zu43dr_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu43dr » Version: N/A
AMD » Zu46dr Firmware » Version: N/A
cpe:2.3:o:amd:zu46dr_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu46dr » Version: N/A
AMD » Zu47dr Firmware » Version: N/A
cpe:2.3:o:amd:zu47dr_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu47dr » Version: N/A
AMD » Zu48dr Firmware » Version: N/A
cpe:2.3:o:amd:zu48dr_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu48dr » Version: N/A
AMD » Zu49dr Firmware » Version: N/A
cpe:2.3:o:amd:zu49dr_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu49dr » Version: N/A
AMD » Zu4cg Firmware » Version: N/A
cpe:2.3:o:amd:zu4cg_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu4cg » Version: N/A
AMD » Zu4eg Firmware » Version: N/A
cpe:2.3:o:amd:zu4eg_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu4eg » Version: N/A
AMD » Zu4ev Firmware » Version: N/A
cpe:2.3:o:amd:zu4ev_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu4ev » Version: N/A
AMD » Zu5cg Firmware » Version: N/A
cpe:2.3:o:amd:zu5cg_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu5cg » Version: N/A
AMD » Zu5eg Firmware » Version: N/A
cpe:2.3:o:amd:zu5eg_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu5eg » Version: N/A
AMD » Zu5ev Firmware » Version: N/A
cpe:2.3:o:amd:zu5ev_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu5ev » Version: N/A
AMD » Zu63dr Firmware » Version: N/A
cpe:2.3:o:amd:zu63dr_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu63dr » Version: N/A
AMD » Zu64dr Firmware » Version: N/A
cpe:2.3:o:amd:zu64dr_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu64dr » Version: N/A
AMD » Zu65dr Firmware » Version: N/A
cpe:2.3:o:amd:zu65dr_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu65dr » Version: N/A
AMD » Zu67dr Firmware » Version: N/A
cpe:2.3:o:amd:zu67dr_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu67dr » Version: N/A
AMD » Zu6cg Firmware » Version: N/A
cpe:2.3:o:amd:zu6cg_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu6cg » Version: N/A
AMD » Zu6eg Firmware » Version: N/A
cpe:2.3:o:amd:zu6eg_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu6eg » Version: N/A
AMD » Zu7cg Firmware » Version: N/A
cpe:2.3:o:amd:zu7cg_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu7cg » Version: N/A
AMD » Zu7eg Firmware » Version: N/A
cpe:2.3:o:amd:zu7eg_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu7eg » Version: N/A
AMD » Zu7ev Firmware » Version: N/A
cpe:2.3:o:amd:zu7ev_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu7ev » Version: N/A
AMD » Zu9cg Firmware » Version: N/A
cpe:2.3:o:amd:zu9cg_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu9cg » Version: N/A
AMD » Zu9eg Firmware » Version: N/A
cpe:2.3:o:amd:zu9eg_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Zu9eg » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2019-5478

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 10 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-5478

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:N/I:P/A:N	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N	1.8	3.6	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: High Availability: None

CWE ids for CVE-2019-5478

CWE-345 Insufficient Verification of Data Authenticity

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

Assigned by: nvd@nist.gov (Primary)
CWE-657 Violation of Secure Design Principles

The product violates well-established principles for secure design.

Assigned by: support@hackerone.com (Secondary)

References for CVE-2019-5478

https://www.xilinx.com/support/answers/72588.html

AR# 72588: Design Advisory for Zynq UltraScale+ MPSoC/RFSoC: Encrypt Only Boot Mode - Unauthenticated Boot and Partition Headers
Vendor Advisory
https://github.com/inversepath/advisories/blob/master/Security_Advisory-Ref_FSC-HWSEC-VR2019-0001-Xilinx_ZU+-Encrypt_Only_Secure_Boot_bypass.txt

advisories/Security_Advisory-Ref_FSC-HWSEC-VR2019-0001-Xilinx_ZU+-Encrypt_Only_Secure_Boot_bypass.txt at master · inversepath/advisories · GitHub
Third Party Advisory

Jump to

Vulnerability Details : CVE-2019-5478

Products affected by CVE-2019-5478

Exploit prediction scoring system (EPSS) score for CVE-2019-5478

CVSS scores for CVE-2019-5478

CWE ids for CVE-2019-5478

References for CVE-2019-5478