MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2019-5478

CVSS 5.5v3.1pub. 2019-09-03upd. 2024-11-27

A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an adversary being able to modify the control fields of the boot image leading to an incorrect secure boot behavior.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

  • Amd Zu11eg

    HW
    Amd
    all versions

  • Amd Zu11eg Firmware

    OS
    Amd
    all versions

  • Amd Zu15eg

    HW
    Amd
    all versions

  • Amd Zu15eg Firmware

    OS
    Amd
    all versions

  • Amd Zu17eg

    HW
    Amd
    all versions

  • Amd Zu17eg Firmware

    OS
    Amd
    all versions

  • Amd Zu19eg

    HW
    Amd
    all versions

  • Amd Zu19eg Firmware

    OS
    Amd
    all versions

  • Amd Zu1cg

    HW
    Amd
    all versions

  • Amd Zu1cg Firmware

    OS
    Amd
    all versions

  • Amd Zu1eg

    HW
    Amd
    all versions

  • Amd Zu1eg Firmware

    OS
    Amd
    all versions

  • Amd Zu21dr

    HW
    Amd
    all versions

  • Amd Zu21dr Firmware

    OS
    Amd
    all versions

  • Amd Zu25dr

    HW
    Amd
    all versions

  • Amd Zu25dr Firmware

    OS
    Amd
    all versions

  • Amd Zu27dr

    HW
    Amd
    all versions

  • Amd Zu27dr Firmware

    OS
    Amd
    all versions

  • Amd Zu28dr

    HW
    Amd
    all versions

  • Amd Zu28dr Firmware

    OS
    Amd
    all versions

  • Amd Zu29dr

    HW
    Amd
    all versions

  • Amd Zu29dr Firmware

    OS
    Amd
    all versions

  • Amd Zu2cg

    HW
    Amd
    all versions

  • Amd Zu2cg Firmware

    OS
    Amd
    all versions

  • Amd Zu2eg

    HW
    Amd
    all versions

  • Amd Zu2eg Firmware

    OS
    Amd
    all versions

  • Amd Zu39dr

    HW
    Amd
    all versions

  • Amd Zu39dr Firmware

    OS
    Amd
    all versions

  • Amd Zu3cg

    HW
    Amd
    all versions

  • Amd Zu3cg Firmware

    OS
    Amd
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2023-31339MEDIUM4.8same product

Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a p...

CVE-2026-49121CRITICAL9.2PL ✓same vendor

RCE przez niebezpieczną deserializację pickle w AITER (ROCm)

CVE-2023-20596CRITICAL9.8PL ✓same vendor

Błąd walidacji danych wejściowych w SMM Supervisor procesorów AMD Ryzen

CVE-2022-23821CRITICAL9.8PL ✓same vendor

Błąd kontroli dostępu w SMM AMD umożliwiający zapis do SPI ROM i RCE

CVE-2023-20586CRITICAL9.8PL ✓same vendor

Privilege escalation w AMD Radeon Software Crimson ReLive Edition