CVE-2020-12290

Last update: Apr 13, 2023

Description

Improper access control in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.

Affected Software
References

Software	From	Fixed in
intel / dsl5520_thunderbolt_2_firmware	-	-
intel / dsl5320_thunderbolt_2_firmware	-	-
intel / dsl6540_thunderbolt_3_firmware	-	-
intel / dsl6340_thunderbolt_3_firmware	-	-
intel / jhl6540_thunderbolt_3_firmware	-	46
intel / jhl6340_thunderbolt_3_firmware	-	46
intel / jhl6240_thunderbolt_3_firmware	-	21
intel / jhl7540_thunderbolt_3_firmware	-	60
intel / jhl7340_thunderbolt_3_firmware	-	60
intel / jhl7040_thunderbolt_3_retimer_firmware	-	22
intel / jhl7440_thunderbolt_3_firmware	-	60
intel / jhl8010r_usb_retimer_firmware	-	41
intel / jhl8040r_thunderbolt_4_retimer_firmware	-	41

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00401.html

Severity: Medium

CVE: CVE-2020-12290
Published: Jun 9, 2021
Updated: Apr 13, 2023
Exploit:

Severity: Medium
Score: 5.5
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: Low
Score: 2.1
AV:L/AC:L/Au:N/C:N/I:N/A:P