Vulnerability Details : CVE-2023-20570
Insufficient verification of data authenticity in
the configuration state machine may allow a local attacker to potentially load
arbitrary bitstreams.
Products affected by CVE-2023-20570
- cpe:2.3:o:amd:alveo_u50_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:alveo_u200_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:alveo_u250_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:alveo_u280_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:kintex_ultrascale\+_ku3p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:kintex_ultrascale\+_ku5p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:kintex_ultrascale\+_ku9p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:kintex_ultrascale\+_ku11p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:kintex_ultrascale\+_ku13p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:kintex_ultrascale\+_ku15p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:kintex_ultrascale\+_ku19p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:kintex_ultrascale_ku025_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:kintex_ultrascale_ku035_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:kintex_ultrascale_ku040_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:kintex_ultrascale_ku060_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:kintex_ultrascale_ku085_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:kintex_ultrascale_ku095_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:kintex_ultrascale_ku115_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:virtex_ultrascale_xcvu065_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:virtex_ultrascale_xcvu080_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:virtex_ultrascale_xcvu095_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:virtex_ultrascale_xcvu125_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:virtex_ultrascale_xcvu160_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:virtex_ultrascale_xcvu190_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:virtex_ultrascale_xcvu440_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:virtex_ultrascale\+_vu3p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:virtex_ultrascale\+_vu5p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:virtex_ultrascale\+_vu7p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:virtex_ultrascale\+_vu9p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:virtex_ultrascale\+_vu11p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:virtex_ultrascale\+_vu13p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:virtex_ultrascale\+_vu19p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:virtex_ultrascale\+_vu23p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:virtex_ultrascale\+_vu27p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:virtex_ultrascale\+_vu29p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:virtex_ultrascale\+_vu31p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:virtex_ultrascale\+_vu33p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:virtex_ultrascale\+_vu35p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:virtex_ultrascale\+_vu37p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:virtex_ultrascale\+_vu45p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:virtex_ultrascale\+_vu47p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:virtex_ultrascale\+_vu57p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:artix_ultrascale\+_au7p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:artix_ultrascale\+_au10p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:artix_ultrascale\+_au15p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:artix_ultrascale\+_au20p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:artix_ultrascale\+_au25p_firmware:-:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2023-20570
0.03%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 6 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2023-20570
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
3.3
|
LOW | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N |
1.8
|
1.4
|
134c704f-9b21-4f2e-91b3-4a467353bcc0 | 2025-03-22 |
|
3.3
|
LOW | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N |
1.8
|
1.4
|
NIST | 2024-10-17 |
CWE ids for CVE-2023-20570
-
The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.Assigned by:
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
- nvd@nist.gov (Primary)
References for CVE-2023-20570
-
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002.html
AMD UltraScale™/UltraScale+™ FPGA Series RSA AuthenticationVendor Advisory
Jump to