3.3
Low
CVE-2023-20570 Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to…
Description
Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentially load arbitrary bitstreams.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Alveo™ Card (UltraScale™and UltraScale+™ based) | Versions not published | |
| Kintex™ UltraScale™ FPGA | Versions not published | |
| Virtex™ UltraScale™ FPGA | Versions not published | |
| Kintex™UltraScale+™ FPGA | Versions not published | |
| Virtex™ UltraScale+™FPGA | Versions not published | |
| Artix™ UltraScale+™ FPGA | Versions not published |