CVEvulnerability

CVE-2019-5478

5.5 MEDIUM Published 2019-09-03 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2019-09-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-345, CWE-657

Description

A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an adversary being able to modify the control fields of the boot image leading to an incorrect secure boot behavior.

Affected configurations

• amd zu11eg firmware • amd zu15eg firmware • amd zu17eg firmware • amd zu19eg firmware • amd zu1cg firmware • amd zu1eg firmware • amd zu21dr firmware • amd zu25dr firmware • amd zu27dr firmware • amd zu28dr firmware • amd zu29dr firmware • amd zu2cg firmware • amd zu2eg firmware • amd zu39dr firmware • amd zu3cg firmware • amd zu3eg firmware • amd zu3tcg firmware • amd zu3teg firmware • amd zu42dr firmware • amd zu43dr firmware • amd zu46dr firmware • amd zu47dr firmware • amd zu48dr firmware • amd zu49dr firmware • amd zu4cg firmware • amd zu4eg firmware • amd zu4ev firmware • amd zu5cg firmware • amd zu5eg firmware • amd zu5ev firmware • amd zu63dr firmware • amd zu64dr firmware • amd zu65dr firmware • amd zu67dr firmware • amd zu6cg firmware • amd zu6eg firmware • amd zu7cg firmware • amd zu7eg firmware • amd zu7ev firmware • amd zu9cg firmware • amd zu9eg firmware

Related

Weakness · CWE (2)

  • CWE-345 Insufficient Verification of Data Authenticity weakness
  • CWE-657 Violation of Secure Design Principles weakness

References