Lucene search

IntelCVE-2020-12328

HistoryNov 12, 2020 - 7:15 p.m.

CVE-2020-12328

2020-11-1219:15:13

intel

web.nvd.nist.gov

cve-2020-12328

intel

thunderbolt

dch drivers

protection mechanism failure

info disclosure

local access

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

4.8

Confidence

High

EPSS

Percentile

12.6%

JSON

Protection mechanism failure in some Intel® Thunderbolt™ DCH drivers for Windows* before version 72 may allow a privileged user to potentially enable information disclosure via local access.

Affected configurations

Nvd

Vulners

Node

intelthunderbolt_dch_driverRange<72windows

VendorProductVersionCPE
intelthunderbolt_dch_driver*cpe:2.3:a:intel:thunderbolt_dch_driver:*:*:*:*:*:windows:*:*

Vendor	Product	Version	CPE
intel	thunderbolt_dch_driver	*	cpe:2.3:a:intel:thunderbolt_dch_driver::::::windows::*

CNA Affected

[
  {
    "product": "Intel(R) Thunderbolt(TM) DCH drivers for Windows*",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "before version 72"
      }
    ]
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00422

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

4.8

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2020-12328