CVE-2020-12292

Last update: Apr 13, 2023

Description

Improper conditions check in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.

Affected Software
References

Software	From	Fixed in
intel / dsl5520_thunderbolt_2_firmware	-	-
intel / dsl5320_thunderbolt_2_firmware	-	-
intel / dsl6540_thunderbolt_3_firmware	-	-
intel / dsl6340_thunderbolt_3_firmware	-	-
intel / jhl6540_thunderbolt_3_firmware	-	46
intel / jhl6340_thunderbolt_3_firmware	-	46
intel / jhl6240_thunderbolt_3_firmware	-	21
intel / jhl7540_thunderbolt_3_firmware	-	60
intel / jhl7340_thunderbolt_3_firmware	-	60
intel / jhl7040_thunderbolt_3_retimer_firmware	-	22
intel / jhl7440_thunderbolt_3_firmware	-	60
intel / jhl8010r_usb_retimer_firmware	-	41
intel / jhl8040r_thunderbolt_4_retimer_firmware	-	41

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00401.html

Severity: Medium

CVE: CVE-2020-12292
Published: Jun 9, 2021
Updated: Apr 13, 2023
Exploit:

Severity: Medium
Score: 5.5
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: Low
Score: 2.1
AV:L/AC:L/Au:N/C:N/I:N/A:P

CWE-754