CVE-2019-5478
A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an adversary being able to modify the control fields of the boot image leading to an incorrect secure boot behavior.
- Score
- CVSS 3.1 5.5 Medium
- Status
- Analyzed - support@hackerone.com
- Published
- 2019-09-03
- Last modified
- 2024-08-04
- Weaknesses
- CWE-345, CWE-657
Affected products
- Zu11eg Firmware (Amd)
- Zu15eg Firmware (Amd)
- Zu17eg Firmware (Amd)
- Zu19eg Firmware (Amd)
- Zu1cg Firmware (Amd)
- Zu1eg Firmware (Amd)
- Zu21dr Firmware (Amd)
- Zu25dr Firmware (Amd)
- Zu27dr Firmware (Amd)
- Zu28dr Firmware (Amd)
- Zu29dr Firmware (Amd)
- Zu2cg Firmware (Amd)
- Zu2eg Firmware (Amd)
- Zu39dr Firmware (Amd)
- Zu3cg Firmware (Amd)
- Zu3eg Firmware (Amd)
- Zu3tcg Firmware (Amd)
- Zu3teg Firmware (Amd)
- Zu42dr Firmware (Amd)
- Zu43dr Firmware (Amd)
- Zu46dr Firmware (Amd)
- Zu47dr Firmware (Amd)
- Zu48dr Firmware (Amd)
- Zu49dr Firmware (Amd)
- Zu4cg Firmware (Amd)
- Zu4eg Firmware (Amd)
- Zu4ev Firmware (Amd)
- Zu5cg Firmware (Amd)
- Zu5eg Firmware (Amd)
- Zu5ev Firmware (Amd)
- Zu63dr Firmware (Amd)
- Zu64dr Firmware (Amd)
- Zu65dr Firmware (Amd)
- Zu67dr Firmware (Amd)
- Zu6cg Firmware (Amd)
- Zu6eg Firmware (Amd)
- Zu7cg Firmware (Amd)
- Zu7eg Firmware (Amd)
- Zu7ev Firmware (Amd)
- Zu9cg Firmware (Amd)
- Zu9eg Firmware (Amd)
References
- https://github.com/inversepath/advisories/blob/master/Security_Advisory-Ref_FSC-HWSEC-VR2019-0001-Xilinx_ZU+-Encrypt_On…
- https://www.xilinx.com/support/answers/72588.html
