{"id":"CVE-2023-20570","aliases":["EUVD-2023-24749","GHSA-cvwm-qh2r-q68h"],"status":"published","title":"Insufficient verification of data authenticity in\nthe configuration state machine may allow a...","description":"Insufficient verification of data authenticity in\nthe configuration state machine may allow a local attacker to potentially load\narbitrary bitstreams.","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00102,"percentile":0.00944,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-345"],"published":"2024-02-13T17:14:09Z","modified":"2026-06-17T05:30:20Z","products":[{"vendor":"amd","product":"alveo_u200_firmware"},{"vendor":"amd","product":"alveo_u250_firmware"},{"vendor":"amd","product":"alveo_u280_firmware"},{"vendor":"amd","product":"alveo_u50_firmware"},{"vendor":"amd","product":"alveo™ card (ultrascale™and ultrascale+™ based)"},{"vendor":"amd","product":"artix_ultrascale\\+_au10p_firmware"},{"vendor":"amd","product":"artix_ultrascale\\+_au15p_firmware"},{"vendor":"amd","product":"artix_ultrascale\\+_au20p_firmware"},{"vendor":"amd","product":"artix_ultrascale\\+_au25p_firmware"},{"vendor":"amd","product":"artix_ultrascale\\+_au7p_firmware"},{"vendor":"amd","product":"artix™ ultrascale+™ fpga"},{"vendor":"amd","product":"kintex_ultrascale\\+_ku11p_firmware"},{"vendor":"amd","product":"kintex_ultrascale\\+_ku13p_firmware"},{"vendor":"amd","product":"kintex_ultrascale\\+_ku15p_firmware"},{"vendor":"amd","product":"kintex_ultrascale\\+_ku19p_firmware"},{"vendor":"amd","product":"kintex_ultrascale\\+_ku3p_firmware"},{"vendor":"amd","product":"kintex_ultrascale\\+_ku5p_firmware"},{"vendor":"amd","product":"kintex_ultrascale\\+_ku9p_firmware"},{"vendor":"amd","product":"kintex_ultrascale_ku025_firmware"},{"vendor":"amd","product":"kintex_ultrascale_ku035_firmware"},{"vendor":"amd","product":"kintex_ultrascale_ku040_firmware"},{"vendor":"amd","product":"kintex_ultrascale_ku060_firmware"},{"vendor":"amd","product":"kintex_ultrascale_ku085_firmware"},{"vendor":"amd","product":"kintex_ultrascale_ku095_firmware"},{"vendor":"amd","product":"kintex_ultrascale_ku115_firmware"},{"vendor":"amd","product":"kintex™ ultrascale™ fpga"},{"vendor":"amd","product":"kintex™ultrascale+™ fpga"},{"vendor":"amd","product":"virtex_ultrascale\\+_vu11p_firmware"},{"vendor":"amd","product":"virtex_ultrascale\\+_vu13p_firmware"},{"vendor":"amd","product":"virtex_ultrascale\\+_vu19p_firmware"},{"vendor":"amd","product":"virtex_ultrascale\\+_vu23p_firmware"},{"vendor":"amd","product":"virtex_ultrascale\\+_vu27p_firmware"},{"vendor":"amd","product":"virtex_ultrascale\\+_vu29p_firmware"},{"vendor":"amd","product":"virtex_ultrascale\\+_vu31p_firmware"},{"vendor":"amd","product":"virtex_ultrascale\\+_vu33p_firmware"},{"vendor":"amd","product":"virtex_ultrascale\\+_vu35p_firmware"},{"vendor":"amd","product":"virtex_ultrascale\\+_vu37p_firmware"},{"vendor":"amd","product":"virtex_ultrascale\\+_vu3p_firmware"},{"vendor":"amd","product":"virtex_ultrascale\\+_vu45p_firmware"},{"vendor":"amd","product":"virtex_ultrascale\\+_vu47p_firmware"},{"vendor":"amd","product":"virtex_ultrascale\\+_vu57p_firmware"},{"vendor":"amd","product":"virtex_ultrascale\\+_vu5p_firmware"},{"vendor":"amd","product":"virtex_ultrascale\\+_vu7p_firmware"},{"vendor":"amd","product":"virtex_ultrascale\\+_vu9p_firmware"},{"vendor":"amd","product":"virtex_ultrascale_xcvu065_firmware"},{"vendor":"amd","product":"virtex_ultrascale_xcvu080_firmware"},{"vendor":"amd","product":"virtex_ultrascale_xcvu095_firmware"},{"vendor":"amd","product":"virtex_ultrascale_xcvu125_firmware"},{"vendor":"amd","product":"virtex_ultrascale_xcvu160_firmware"},{"vendor":"amd","product":"virtex_ultrascale_xcvu190_firmware"},{"vendor":"amd","product":"virtex_ultrascale_xcvu440_firmware"},{"vendor":"amd","product":"virtex™ ultrascale+™fpga"},{"vendor":"amd","product":"virtex™ ultrascale™ fpga"}],"references":[{"url":"https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002.html","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-20570"},{"url":"https://github.com/advisories/GHSA-cvwm-qh2r-q68h"}],"sources":{"cve":[{"id":"CVE-2023-20570","description":"Insufficient verification of data authenticity in\nthe configuration state machine may allow a local attacker to potentially load\narbitrary bitstreams.\n\n\n\n\n\n","status":"published","published":"2024-02-13T17:14:09.431Z","modified":"2025-03-22T14:12:52.749Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"adp"}],"cwes":["CWE-345"],"updated_at":"2026-11-02T14:35:13.368958Z"}],"euvd":[{"id":"EUVD-2023-24749","description":"Insufficient verification of data authenticity in\nthe configuration state machine may allow a local attacker to potentially load\narbitrary bitstreams.\n\n\n\n\n\n","status":"published","published":"2024-02-13T17:14:09Z","modified":"2025-03-22T14:12:52Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T20:52:55.622908Z"}],"ghsa":[{"id":"GHSA-cvwm-qh2r-q68h","title":"Insufficient verification of data authenticity in\nthe configuration state machine may allow a...","description":"Insufficient verification of data authenticity in\nthe configuration state machine may allow a local attacker to potentially load\narbitrary bitstreams.","status":"published","published":"2024-02-13T18:38:23Z","modified":"2025-03-22T15:30:34Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-345"],"updated_at":"2026-11-02T15:00:24.265228Z"}],"nvd":[{"id":"CVE-2023-20570","description":"Insufficient verification of data authenticity in\nthe configuration state machine may allow a local attacker to potentially load\narbitrary bitstreams.\n\n\n\n\n\n","status":"published","published":"2024-02-13T18:15:47.233Z","modified":"2026-06-17T05:30:20.227Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"primary"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-345"],"updated_at":"2026-11-02T14:09:04.527564Z"}]}}