1. Home
  2. CVE Database
  3. CVE-2023-20570
LOW · 3.3

CVE-2023-20570

Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentially load arbitrary bitstreams.

Vulnerability Description

Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentially load arbitrary bitstreams.

CVSS Score

3.3

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
AmdAlveo U50 Firmware-
AmdAlveo U50-
AmdAlveo U200 Firmware-
AmdAlveo U200-
AmdAlveo U250 Firmware-
AmdAlveo U250-
AmdAlveo U280 Firmware-
AmdAlveo U280-
AmdKintex Ultrascale\+ Ku3P Firmware-
AmdKintex Ultrascale\+ Ku3P-
AmdKintex Ultrascale\+ Ku5P Firmware-
AmdKintex Ultrascale\+ Ku5P-
AmdKintex Ultrascale\+ Ku9P Firmware-
AmdKintex Ultrascale\+ Ku9P-
AmdKintex Ultrascale\+ Ku11P Firmware-
AmdKintex Ultrascale\+ Ku11P-
AmdKintex Ultrascale\+ Ku13P Firmware-
AmdKintex Ultrascale\+ Ku13P-
AmdKintex Ultrascale\+ Ku15P Firmware-
AmdKintex Ultrascale\+ Ku15P-

Related Weaknesses (CWE)

CWE-345

References

FAQ

What is CVE-2023-20570?

CVE-2023-20570 is a vulnerability with a CVSS score of 3.3 (LOW). Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentially load arbitrary bitstreams.

How severe is CVE-2023-20570?

CVE-2023-20570 has been rated LOW with a CVSS base score of 3.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-20570?

Check the references section above for vendor advisories and patch information. Affected products include: Amd Alveo U50 Firmware, Amd Alveo U50, Amd Alveo U200 Firmware, Amd Alveo U200, Amd Alveo U250 Firmware.