CVE-2019-5478

State: Published
Severity: Not scored
Published: Sep 3, 2019
Updated: Aug 4, 2024
Reserved: Jan 4, 2019

Description

A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an adversary being able to modify the control fields of the boot image leading to an incorrect secure boot behavior.

Scores

The record has no CVSS score.

Weaknesses

CWE-657 Violation of Secure Design Principles (CWE-657)

Affected Products

Product	Versions
Zynq UltraScale+ SoCn/a	Not FixedAffected

References

https://www.xilinx.com/support/answers/72588.html
https://github.com/inversepath/advisories/blob/master/Security_Advisory-Ref_FSC-HWSEC-VR2019-0001-Xilinx_ZU+-Encrypt_Only_Secure_Boot_bypass.txt

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.