Lucene search

[email protected]NVD:CVE-2020-12291

HistoryJun 09, 2021 - 7:15 p.m.

CVE-2020-12291

2021-06-0919:15:08

CWE-400

[email protected]

web.nvd.nist.gov

cve-2020-12291

uncontrolled resource consumption

intel thunderbolt controllers

authenticated user

denial of service

local access

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

12.6%

JSON

Uncontrolled resource consumption in some Intel® Thunderbolt™ controllers may allow an authenticated user to potentially enable denial of service via local access.

Affected configurations

Nvd

Node

inteljhl6240_thunderbolt_3_firmwareRange<21

AND

inteljhl6240_thunderbolt_3Match-

Node

inteljhl6340_thunderbolt_3_firmwareRange<46

AND

inteljhl6340_thunderbolt_3Match-

Node

inteljhl6540_thunderbolt_3_firmwareRange<46

AND

inteljhl6540_thunderbolt_3Match-

Node

inteljhl7040_thunderbolt_3_retimer_firmwareRange<22

AND

inteljhl7040_thunderbolt_3_retimerMatch-

Node

inteljhl7340_thunderbolt_3_firmwareRange<60

AND

inteljhl7340_thunderbolt_3Match-

Node

inteljhl7440_thunderbolt_3_firmwareRange<60

AND

inteljhl7440_thunderbolt_3Match-

Node

inteljhl7540_thunderbolt_3_firmwareRange<60

AND

inteljhl7540_thunderbolt_3Match-

Node

inteljhl8010r_usb_retimer_firmwareRange<41

AND

inteljhl8010r_usb_retimerMatch-

Node

inteldsl5320_thunderbolt_2_firmware

AND

inteldsl5320_thunderbolt_2Match-

Node

inteldsl5520_thunderbolt_2_firmware

AND

inteldsl5520_thunderbolt_2Match-

Node

inteldsl6340_thunderbolt_3_firmware

AND

inteldsl6340_thunderbolt_3Match-

Node

inteldsl6540_thunderbolt_3_firmware

AND

inteldsl6540_thunderbolt_3Match-

Node

inteljhl8040r_thunderbolt_4_retimer_firmwareRange<41

AND

inteljhl8040r_thunderbolt_4_retimerMatch-

VendorProductVersionCPE
inteljhl6240_thunderbolt_3_firmware*cpe:2.3:o:intel:jhl6240_thunderbolt_3_firmware:*:*:*:*:*:*:*:*
inteljhl6240_thunderbolt_3-cpe:2.3:h:intel:jhl6240_thunderbolt_3:-:*:*:*:*:*:*:*
inteljhl6340_thunderbolt_3_firmware*cpe:2.3:o:intel:jhl6340_thunderbolt_3_firmware:*:*:*:*:*:*:*:*
inteljhl6340_thunderbolt_3-cpe:2.3:h:intel:jhl6340_thunderbolt_3:-:*:*:*:*:*:*:*
inteljhl6540_thunderbolt_3_firmware*cpe:2.3:o:intel:jhl6540_thunderbolt_3_firmware:*:*:*:*:*:*:*:*
inteljhl6540_thunderbolt_3-cpe:2.3:h:intel:jhl6540_thunderbolt_3:-:*:*:*:*:*:*:*
inteljhl7040_thunderbolt_3_retimer_firmware*cpe:2.3:o:intel:jhl7040_thunderbolt_3_retimer_firmware:*:*:*:*:*:*:*:*
inteljhl7040_thunderbolt_3_retimer-cpe:2.3:h:intel:jhl7040_thunderbolt_3_retimer:-:*:*:*:*:*:*:*
inteljhl7340_thunderbolt_3_firmware*cpe:2.3:o:intel:jhl7340_thunderbolt_3_firmware:*:*:*:*:*:*:*:*
inteljhl7340_thunderbolt_3-cpe:2.3:h:intel:jhl7340_thunderbolt_3:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
intel	jhl6240_thunderbolt_3_firmware	*	cpe:2.3:o:intel:jhl6240_thunderbolt_3_firmware::::::::
intel	jhl6240_thunderbolt_3	-	cpe:2.3:h:intel:jhl6240_thunderbolt_3:-:::::::*
intel	jhl6340_thunderbolt_3_firmware	*	cpe:2.3:o:intel:jhl6340_thunderbolt_3_firmware::::::::
intel	jhl6340_thunderbolt_3	-	cpe:2.3:h:intel:jhl6340_thunderbolt_3:-:::::::*
intel	jhl6540_thunderbolt_3_firmware	*	cpe:2.3:o:intel:jhl6540_thunderbolt_3_firmware::::::::
intel	jhl6540_thunderbolt_3	-	cpe:2.3:h:intel:jhl6540_thunderbolt_3:-:::::::*
intel	jhl7040_thunderbolt_3_retimer_firmware	*	cpe:2.3:o:intel:jhl7040_thunderbolt_3_retimer_firmware::::::::
intel	jhl7040_thunderbolt_3_retimer	-	cpe:2.3:h:intel:jhl7040_thunderbolt_3_retimer:-:::::::*
intel	jhl7340_thunderbolt_3_firmware	*	cpe:2.3:o:intel:jhl7340_thunderbolt_3_firmware::::::::
intel	jhl7340_thunderbolt_3	-	cpe:2.3:h:intel:jhl7340_thunderbolt_3:-:::::::*

Rows per page:

1-10 of 261

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00401.html

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

12.6%

JSON

Related for NVD:CVE-2020-12291

cve1 cvelist1 prion1 lenovo1 hp1 intel1