CVE-2023-20570
Insufficient verification of data authenticity in the configuration state machine may allow a...
Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentially load arbitrary bitstreams.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentially load arbitrary bitstreams.
- Record
CVE-2023-20570- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-345
- Updated
- 2026-11-02
CVE List
Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentially load arbitrary bitstreams.
- Record
CVE-2023-20570- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-345
- Updated
- 2026-11-02
EUVDEUVD-2023-24749
Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentially load arbitrary bitstreams.
- Record
EUVD-2023-24749- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-cvwm-qh2r-q68h
Insufficient verification of data authenticity in the configuration state machine may allow a...
Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentially load arbitrary bitstreams.
- Record
GHSA-cvwm-qh2r-q68h- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-345
- Updated
- 2026-11-02
Affected products
- amd alveo u200 firmware
- amd alveo u250 firmware
- amd alveo u280 firmware
- amd alveo u50 firmware
- amd alveo™ card (ultrascale™and ultrascale+™ based)
- amd artix ultrascale\+ au10p firmware
- amd artix ultrascale\+ au15p firmware
- amd artix ultrascale\+ au20p firmware
- amd artix ultrascale\+ au25p firmware
- amd artix ultrascale\+ au7p firmware
- amd artix™ ultrascale+™ fpga
- amd kintex ultrascale\+ ku11p firmware
Show 41 moreShow less
- amd kintex ultrascale\+ ku13p firmware
- amd kintex ultrascale\+ ku15p firmware
- amd kintex ultrascale\+ ku19p firmware
- amd kintex ultrascale\+ ku3p firmware
- amd kintex ultrascale\+ ku5p firmware
- amd kintex ultrascale\+ ku9p firmware
- amd kintex ultrascale ku025 firmware
- amd kintex ultrascale ku035 firmware
- amd kintex ultrascale ku040 firmware
- amd kintex ultrascale ku060 firmware
- amd kintex ultrascale ku085 firmware
- amd kintex ultrascale ku095 firmware
- amd kintex ultrascale ku115 firmware
- amd kintex™ ultrascale™ fpga
- amd kintex™ultrascale+™ fpga
- amd virtex ultrascale\+ vu11p firmware
- amd virtex ultrascale\+ vu13p firmware
- amd virtex ultrascale\+ vu19p firmware
- amd virtex ultrascale\+ vu23p firmware
- amd virtex ultrascale\+ vu27p firmware
- amd virtex ultrascale\+ vu29p firmware
- amd virtex ultrascale\+ vu31p firmware
- amd virtex ultrascale\+ vu33p firmware
- amd virtex ultrascale\+ vu35p firmware
- amd virtex ultrascale\+ vu37p firmware
- amd virtex ultrascale\+ vu3p firmware
- amd virtex ultrascale\+ vu45p firmware
- amd virtex ultrascale\+ vu47p firmware
- amd virtex ultrascale\+ vu57p firmware
- amd virtex ultrascale\+ vu5p firmware
- amd virtex ultrascale\+ vu7p firmware
- amd virtex ultrascale\+ vu9p firmware
- amd virtex ultrascale xcvu065 firmware
- amd virtex ultrascale xcvu080 firmware
- amd virtex ultrascale xcvu095 firmware
- amd virtex ultrascale xcvu125 firmware
- amd virtex ultrascale xcvu160 firmware
- amd virtex ultrascale xcvu190 firmware
- amd virtex ultrascale xcvu440 firmware
- amd virtex™ ultrascale+™fpga
- amd virtex™ ultrascale™ fpga
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-20570 is a low vulnerability (CVSS 3.3) in Amd Alveo U200 Firmware, published February 13, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.10%, the 0th percentile. No source names a fixed version.