CVE-2023-20570

Published: Feb 13, 2024Modified: Mar 22, 2025

3.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Exploitability: 1.8 / Impact: 1.4

Source: NVD

Description

Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentially load arbitrary bitstreams.

Affected (47)

47 products

Kintex Ultrascale+ Ku3p Firmware

Kintex Ultrascale+ Ku5p Firmware

Kintex Ultrascale+ Ku9p Firmware

Kintex Ultrascale+ Ku11p Firmware

Kintex Ultrascale+ Ku13p Firmware

Kintex Ultrascale+ Ku15p Firmware

Kintex Ultrascale+ Ku19p Firmware

Kintex Ultrascale Ku025 Firmware

Kintex Ultrascale Ku035 Firmware

Kintex Ultrascale Ku040 Firmware

Kintex Ultrascale Ku060 Firmware

Kintex Ultrascale Ku085 Firmware

Kintex Ultrascale Ku095 Firmware

Kintex Ultrascale Ku115 Firmware

Virtex Ultrascale Xcvu065 Firmware

Virtex Ultrascale Xcvu080 Firmware

Virtex Ultrascale Xcvu095 Firmware

Virtex Ultrascale Xcvu125 Firmware

Virtex Ultrascale Xcvu160 Firmware

Virtex Ultrascale Xcvu190 Firmware

Virtex Ultrascale Xcvu440 Firmware

Virtex Ultrascale+ Vu3p Firmware

Virtex Ultrascale+ Vu5p Firmware

Virtex Ultrascale+ Vu7p Firmware

Virtex Ultrascale+ Vu9p Firmware

Virtex Ultrascale+ Vu11p Firmware

Virtex Ultrascale+ Vu13p Firmware

Virtex Ultrascale+ Vu19p Firmware

Virtex Ultrascale+ Vu23p Firmware

Virtex Ultrascale+ Vu27p Firmware

Virtex Ultrascale+ Vu29p Firmware

Virtex Ultrascale+ Vu31p Firmware

Virtex Ultrascale+ Vu33p Firmware

Virtex Ultrascale+ Vu35p Firmware

Virtex Ultrascale+ Vu37p Firmware

Virtex Ultrascale+ Vu45p Firmware

Virtex Ultrascale+ Vu47p Firmware

Virtex Ultrascale+ Vu57p Firmware

Artix Ultrascale+ Au7p Firmware

Artix Ultrascale+ Au10p Firmware

Artix Ultrascale+ Au15p Firmware

Artix Ultrascale+ Au20p Firmware

Artix Ultrascale+ Au25p Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Alveo U50 Firmware	All versions

Running on/with	Platform Versions
Amd Alveo U50	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Alveo U200 Firmware	All versions

Running on/with	Platform Versions
Amd Alveo U200	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Alveo U250 Firmware	All versions

Running on/with	Platform Versions
Amd Alveo U250	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Alveo U280 Firmware	All versions

Running on/with	Platform Versions
Amd Alveo U280	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Kintex Ultrascale+ Ku3p Firmware	All versions

Running on/with	Platform Versions
Amd Kintex Ultrascale+ Ku3p	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Kintex Ultrascale+ Ku5p Firmware	All versions

Running on/with	Platform Versions
Amd Kintex Ultrascale+ Ku5p	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Kintex Ultrascale+ Ku9p Firmware	All versions

Running on/with	Platform Versions
Amd Kintex Ultrascale+ Ku9p	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Kintex Ultrascale+ Ku11p Firmware	All versions

Running on/with	Platform Versions
Amd Kintex Ultrascale+ Ku11p	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Kintex Ultrascale+ Ku13p Firmware	All versions

Running on/with	Platform Versions
Amd Kintex Ultrascale+ Ku13p	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Kintex Ultrascale+ Ku15p Firmware	All versions

Running on/with	Platform Versions
Amd Kintex Ultrascale+ Ku15p	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Kintex Ultrascale+ Ku19p Firmware	All versions

Running on/with	Platform Versions
Amd Kintex Ultrascale+ Ku19p	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Kintex Ultrascale Ku025 Firmware	All versions

Running on/with	Platform Versions
Amd Kintex Ultrascale Ku025	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Kintex Ultrascale Ku035 Firmware	All versions

Running on/with	Platform Versions
Amd Kintex Ultrascale Ku035	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Kintex Ultrascale Ku040 Firmware	All versions

Running on/with	Platform Versions
Amd Kintex Ultrascale Ku040	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Kintex Ultrascale Ku060 Firmware	All versions

Running on/with	Platform Versions
Amd Kintex Ultrascale Ku060	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Kintex Ultrascale Ku085 Firmware	All versions

Running on/with	Platform Versions
Amd Kintex Ultrascale Ku085	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Kintex Ultrascale Ku095 Firmware	All versions

Running on/with	Platform Versions
Amd Kintex Ultrascale Ku095	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Kintex Ultrascale Ku115 Firmware	All versions

Running on/with	Platform Versions
Amd Kintex Ultrascale Ku115	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Virtex Ultrascale Xcvu065 Firmware	All versions

Running on/with	Platform Versions
Amd Virtex Ultrascale Xcvu065	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Virtex Ultrascale Xcvu080 Firmware	All versions

Running on/with	Platform Versions
Amd Virtex Ultrascale Xcvu080	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Virtex Ultrascale Xcvu095 Firmware	All versions

Running on/with	Platform Versions
Amd Virtex Ultrascale Xcvu095	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Virtex Ultrascale Xcvu125 Firmware	All versions

Running on/with	Platform Versions
Amd Virtex Ultrascale Xcvu125	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Virtex Ultrascale Xcvu160 Firmware	All versions

Running on/with	Platform Versions
Amd Virtex Ultrascale Xcvu160	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Virtex Ultrascale Xcvu190 Firmware	All versions

Running on/with	Platform Versions
Amd Virtex Ultrascale Xcvu190	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Virtex Ultrascale Xcvu440 Firmware	All versions

Running on/with	Platform Versions
Amd Virtex Ultrascale Xcvu440	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Virtex Ultrascale+ Vu3p Firmware	All versions

Running on/with	Platform Versions
Amd Virtex Ultrascale+ Vu3p	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Virtex Ultrascale+ Vu5p Firmware	All versions

Running on/with	Platform Versions
Amd Virtex Ultrascale+ Vu5p	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Virtex Ultrascale+ Vu7p Firmware	All versions

Running on/with	Platform Versions
Amd Virtex Ultrascale+ Vu7p	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Virtex Ultrascale+ Vu9p Firmware	All versions

Running on/with	Platform Versions
Amd Virtex Ultrascale+ Vu9p	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Virtex Ultrascale+ Vu11p Firmware	All versions

Running on/with	Platform Versions
Amd Virtex Ultrascale+ Vu11p	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Virtex Ultrascale+ Vu13p Firmware	All versions

Running on/with	Platform Versions
Amd Virtex Ultrascale+ Vu13p	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Virtex Ultrascale+ Vu19p Firmware	All versions

Running on/with	Platform Versions
Amd Virtex Ultrascale+ Vu19p	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Virtex Ultrascale+ Vu23p Firmware	All versions

Running on/with	Platform Versions
Amd Virtex Ultrascale+ Vu23p	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Virtex Ultrascale+ Vu27p Firmware	All versions

Running on/with	Platform Versions
Amd Virtex Ultrascale+ Vu27p	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Virtex Ultrascale+ Vu29p Firmware	All versions

Running on/with	Platform Versions
Amd Virtex Ultrascale+ Vu29p	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Virtex Ultrascale+ Vu31p Firmware	All versions

Running on/with	Platform Versions
Amd Virtex Ultrascale+ Vu31p	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Virtex Ultrascale+ Vu33p Firmware	All versions

Running on/with	Platform Versions
Amd Virtex Ultrascale+ Vu33p	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Virtex Ultrascale+ Vu35p Firmware	All versions

Running on/with	Platform Versions
Amd Virtex Ultrascale+ Vu35p	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Virtex Ultrascale+ Vu37p Firmware	All versions

Running on/with	Platform Versions
Amd Virtex Ultrascale+ Vu37p	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Virtex Ultrascale+ Vu45p Firmware	All versions

Running on/with	Platform Versions
Amd Virtex Ultrascale+ Vu45p	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Virtex Ultrascale+ Vu47p Firmware	All versions

Running on/with	Platform Versions
Amd Virtex Ultrascale+ Vu47p	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Virtex Ultrascale+ Vu57p Firmware	All versions

Running on/with	Platform Versions
Amd Virtex Ultrascale+ Vu57p	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Artix Ultrascale+ Au7p Firmware	All versions

Running on/with	Platform Versions
Amd Artix Ultrascale+ Au7p	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Artix Ultrascale+ Au10p Firmware	All versions

Running on/with	Platform Versions
Amd Artix Ultrascale+ Au10p	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Artix Ultrascale+ Au15p Firmware	All versions

Running on/with	Platform Versions
Amd Artix Ultrascale+ Au15p	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Artix Ultrascale+ Au20p Firmware	All versions

Running on/with	Platform Versions
Amd Artix Ultrascale+ Au20p	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Artix Ultrascale+ Au25p Firmware	All versions

Running on/with	Platform Versions
Amd Artix Ultrascale+ Au25p	All versions

Related CWEs

CWE-345

Insufficient Verification of Data Authenticity

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

References (2)

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002.html

Source: psirt@amd.com

Vendor Advisory

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.