Xilinx Zynq-7000s Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Xilinx Zynq-7000s Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-27208 — CVSS 6.8 (medium): When booting a Zync-7000 SOC device from nand flash memory, the nand driver in the ROM does not validate the inputs when reading in any…
• CVE-2022-23822 — CVSS 6.8 (medium): In this physical attack, an attacker may potentially exploit the Zynq-7000 SoC First Stage Boot Loader (FSBL) by bypassing authentication…