CVE-2023-20570

Severity: low (CVSS 3.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-02-13 · updated 2026-06-17
Weakness: CWE-345

Description

Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentially load arbitrary bitstreams.

Affected products

AMD Alveo U200 Firmware: all versions
AMD Alveo U250 Firmware: all versions
AMD Alveo U280 Firmware: all versions
AMD Alveo U50 Firmware: all versions
AMD Artix Ultrascale+ Au10P Firmware: all versions
AMD Artix Ultrascale+ Au15P Firmware: all versions
AMD Artix Ultrascale+ Au20P Firmware: all versions
AMD Artix Ultrascale+ Au25P Firmware: all versions
AMD Artix Ultrascale+ Au7P Firmware: all versions
AMD Kintex Ultrascale+ Ku11P Firmware: all versions
AMD Kintex Ultrascale+ Ku13P Firmware: all versions
AMD Kintex Ultrascale+ Ku15P Firmware: all versions
AMD Kintex Ultrascale+ Ku19P Firmware: all versions
AMD Kintex Ultrascale+ Ku3P Firmware: all versions
AMD Kintex Ultrascale+ Ku5P Firmware: all versions
AMD Kintex Ultrascale+ Ku9P Firmware: all versions
AMD Kintex Ultrascale Ku025 Firmware: all versions
AMD Kintex Ultrascale Ku035 Firmware: all versions
AMD Kintex Ultrascale Ku040 Firmware: all versions
AMD Kintex Ultrascale Ku060 Firmware: all versions
AMD Kintex Ultrascale Ku085 Firmware: all versions
AMD Kintex Ultrascale Ku095 Firmware: all versions
AMD Kintex Ultrascale Ku115 Firmware: all versions
AMD Virtex Ultrascale+ Vu11P Firmware: all versions
AMD Virtex Ultrascale+ Vu13P Firmware: all versions
AMD Virtex Ultrascale+ Vu19P Firmware: all versions
AMD Virtex Ultrascale+ Vu23P Firmware: all versions
AMD Virtex Ultrascale+ Vu27P Firmware: all versions
AMD Virtex Ultrascale+ Vu29P Firmware: all versions
AMD Virtex Ultrascale+ Vu31P Firmware: all versions

References

Get alerted when CVE-2023-20570 or the next vulnerability affects your stack