CVE-2023-20570

Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentially load arbitrary bitstreams

Low · published February 13, 2024

CVSS v3.1
3.3
EPSS
0%
Percentile
0.9
In the wild
Unconfirmed
What it is

Insufficient verification of data authenticity in

the configuration state machine may allow a local attacker to potentially load

arbitrary bitstreams.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00102 · 0.9th percentile
Published
2024-02-13T17:14Z
EPSS history
Timeline
  • 13 FEB 17:14Z
    Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentially load arbitrary bitstreams
    cvelistv5