CVE-2019-5478
A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an...
A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an adversary being able to modify the control fields of the boot image leading to an incorrect secure boot behavior.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an adversary being able to modify the control fields of the boot image leading to an incorrect secure boot behavior.
- Record
CVE-2019-5478- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N - CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-657, CWE-345
- Updated
- 2026-11-02
CVE List No score
A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an adversary being able to modify the control fields of the boot image leading to an incorrect secure boot behavior.
- Record
CVE-2019-5478- Weakness
- CWE-657
- Updated
- 2026-11-02
EUVDEUVD-2019-15058 No score
A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an adversary being able to modify the control fields of the boot image leading to an incorrect secure boot behavior.
- Record
EUVD-2019-15058- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mj5p-5fc7-225v
A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an...
A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an adversary being able to modify the control fields of the boot image leading to an incorrect secure boot behavior.
- Record
GHSA-mj5p-5fc7-225v- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-345, CWE-657
- Updated
- 2026-11-02
Affected products
- amd zu11eg firmware
- amd zu15eg firmware
- amd zu17eg firmware
- amd zu19eg firmware
- amd zu1cg firmware
- amd zu1eg firmware
- amd zu21dr firmware
- amd zu25dr firmware
- amd zu27dr firmware
- amd zu28dr firmware
- amd zu29dr firmware
- amd zu2cg firmware
Show 29 moreShow less
- amd zu2eg firmware
- amd zu39dr firmware
- amd zu3cg firmware
- amd zu3eg firmware
- amd zu3tcg firmware
- amd zu3teg firmware
- amd zu42dr firmware
- amd zu43dr firmware
- amd zu46dr firmware
- amd zu47dr firmware
- amd zu48dr firmware
- amd zu49dr firmware
- amd zu4cg firmware
- amd zu4eg firmware
- amd zu4ev firmware
- amd zu5cg firmware
- amd zu5eg firmware
- amd zu5ev firmware
- amd zu63dr firmware
- amd zu64dr firmware
- amd zu65dr firmware
- amd zu67dr firmware
- amd zu6cg firmware
- amd zu6eg firmware
- amd zu7cg firmware
- amd zu7eg firmware
- amd zu7ev firmware
- amd zu9cg firmware
- amd zu9eg firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-5478 is a medium vulnerability (CVSS 5.5) in Amd Zu11eg Firmware, published September 3, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.25%, the 16th percentile. No source names a fixed version.