Lucene search
+L

1060 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/12 12:00 a.m.•3 views

CVE-2020-12327: Initialization of a Resource with an Insecure Default

Insecure default variable initialization in some IntelR ThunderboltTM DCH drivers for Windows before version 72 may allow a privileged user to potentially enable information disclosure via local access...

4.4CVSS5.8AI score0.00315EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/12 12:00 a.m.•1 views

CVE-2020-12326: Improper Initialization

Improper initialization in some IntelR ThunderboltTM DCH drivers for Windows before version 72 may allow an authenticated user to potentially enable information disclosure via local access...

5.5CVSS5.8AI score0.00307EPSS
SaveExploits0References2
Intel
Intel
•added 2020/11/10 12:00 a.m.•39 views

Intel® Thunderbolt™ DCH Drivers for Windows* Advisory

Summary: Potential security vulnerabilities in some Intel® Thunderbolt™ DCH drivers for Windows may allow escalation of privilege or information disclosure. Intel is releasing updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-12325 Description: Improper...

7.8CVSS5.9AI score0.00323EPSS
SaveExploits0
Lenovo
Lenovo
•added 2020/11/04 5:09 p.m.•41 views

Intel Thunderbolt DCH Drivers for Windows Advisory - Lenovo Support US

No description provided...

7.8CVSS5AI score0.00323EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2020/10/27 12:00 a.m.•20 views

The vulnerability of Intel Thunderbolt controller interfaces, related to insufficient input data validation, allows attackers to gain unauthorized access to protected information.

The vulnerability of Intel Thunderbolt controller interfaces is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

4.8CVSS5.5AI score0.00338EPSS
SaveExploits0References3
NVD
NVD
•added 2020/08/13 3:15 a.m.•35 views

CVE-2019-14630

Reliance on untrusted inputs in a security decision in some IntelR ThunderboltTM controllers may allow unauthenticated user to potentially enable information disclosure via physical access...

4.6CVSS4.5AI score0.00338EPSS
SaveExploits0References1
Prion
Prion
•added 2020/08/13 3:15 a.m.•31 views

Information disclosure

Reliance on untrusted inputs in a security decision in some IntelR ThunderboltTM controllers may allow unauthenticated user to potentially enable information disclosure via physical access...

2.1CVSS4.5AI score0.00338EPSS
SaveExploits0References1
CVE
CVE
•added 2020/08/13 2:08 a.m.•81 views

CVE-2019-14630

The CVE-2019-14630 issue affects Intel Thunderbolt controllers (Thunderbolt 1–3: DSL3310/3510/4510/4410; DSL5520/5320; DSL6540/6340/JHL6540/JHL6340/JHL6240/JHL7540/JHL7340). Description: reliance on untrusted inputs in a security decision may allow an unauthenticated user with physical access to ...

4.6CVSS4.3AI score0.00338EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/08/13 2:08 a.m.•48 views

CVE-2019-14630

Reliance on untrusted inputs in a security decision in some IntelR ThunderboltTM controllers may allow unauthenticated user to potentially enable information disclosure via physical access...

4.5AI score0.00338EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/13 12:00 a.m.•3 views

CVE-2019-14630: Undefined Security Weakness

Reliance on untrusted inputs in a security decision in some IntelR ThunderboltTM controllers may allow unauthenticated user to potentially enable information disclosure via physical access...

4.6CVSS5.8AI score0.00338EPSS
SaveExploits0References1
Intel
Intel
•added 2020/08/11 12:00 a.m.•42 views

Intel® Thunderbolt™ Controller Advisory

Summary: A potential security vulnerability in some Intel® Thunderbolt™ controllers may allow information disclosure. Intel is releasing prescriptive guidance to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-14630 Description: Reliance on untrusted inputs in a...

4.6CVSS4.4AI score0.00338EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2020/06/26 12:00 a.m.•39 views

Fedora 31 : fwupd (2020-ad1c74c2a1)

New upstream release - Actually reload the DFU device after upgrade has completed - Capture the dock SKU in report metadata - Correctly set the Logitech device protocol - Do not use shim for non-secure boot configurations - Ensure that the DeviceID is set for child devices - Fix an error when...

6CVSS6.2AI score0.0049EPSS
SaveExploits2References2
BDU FSTEC
BDU FSTEC
•added 2020/06/05 12:00 a.m.•11 views

The vulnerability of Thunderbolt devices’ microcontrollers, related to errors in the implementation of backward compatibility mechanisms, allows attackers to gain direct access to the memory of computing devices to which Thunderbolt-enabled devices are connected.

The vulnerability of Thunderbolt device microcontrollers is related to errors in the implementation of backward compatibility mechanisms. Exploiting this vulnerability can allow an attacker to gain direct access to the memory of computing devices, to which Thunderbolt-enabled devices are connecte...

7.6CVSS5.5AI score
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/06/05 12:00 a.m.•26 views

The vulnerability of Thunderbolt devices’ microcontrollers, related to errors in the implementation of the SPI Flash interface, allows attackers to gain direct access to the memory of computing devices connected to Thunderbolt interfaces.

The vulnerability of Thunderbolt device microcontrollers is related to errors in the implementation of the SPI Flash interface. Exploiting this vulnerability can allow an attacker to gain direct access to the memory of computing devices, to which Thunderbolt-enabled devices are connected...

7.6CVSS5.5AI score
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/06/05 12:00 a.m.•11 views

The vulnerability of Thunderbolt devices’ microcontrollers stems from the use of inadequate firmware verification schemes. This allows attackers to gain direct access to the memory of computing devices, which are connected to Thunderbolt interfaces.

The vulnerability of Thunderbolt device microcontrollers is related to the use of inadequate firmware verification schemes. Exploiting this vulnerability can allow an attacker to gain direct access to the memory of the computing device, to which Thunderbolt devices are connected...

7.6CVSS5.5AI score
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/06/05 12:00 a.m.•25 views

The vulnerability of Thunderbolt devices’ microcontrollers lies in the ability to load metadata from an unauthenticated device. This allows a hacker to gain direct access to the memory of computing devices connected to Thunderbolt interfaces.

The vulnerability of Thunderbolt devices’ microcontrollers relates to the ability to load metadata from an unauthenticated device. Exploiting this vulnerability can allow a hacker to gain direct access to the memory of the computing device, which is connected to Thunderbolt devices...

7.6CVSS5.5AI score
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/06/05 12:00 a.m.•13 views

The vulnerability of Thunderbolt device microcontrollers, related to the lack of protection at the “Work Camp” level, allows a intruder to gain direct access to the memory of computing devices to which Thunderbolt-enabled devices are connected.

The vulnerability of Thunderbolt device microcontrollers is related to the lack of protection at the “Work Camp” level. Exploiting this vulnerability can allow an attacker to gain direct access to the memory of computing devices, to which Thunderbolt devices are connected...

7.6CVSS5.5AI score
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/06/05 12:00 a.m.•17 views

The vulnerability of Thunderbolt devices’ microcontrollers stems from the use of a weak authentication scheme for the device. This allows attackers to gain direct access to the memory of the computing device, which is connected to Thunderbolt interfaces.

The vulnerability of Thunderbolt device microcontrollers is related to the use of a weak authentication mechanism for devices. Exploiting this vulnerability can allow attackers to gain direct access to the memory of computing devices, to which Thunderbolt devices are connected...

7.6CVSS5.5AI score
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/06/05 12:00 a.m.•62 views

The vulnerability of Thunderbolt devices’ microcontrollers stems from the ability to use configuration parameters of an unauthenticated controller. This allows a malicious actor to gain direct access to the memory of computing devices connected to Thunderbolt interfaces.

The vulnerability of Thunderbolt device microcontrollers lies in the ability to use configuration parameters for an unauthenticated controller. Exploiting this vulnerability can allow a hacker to gain direct access to the memory of the computing device, which is connected to Thunderbolt devices...

7.6CVSS5.5AI score
SaveExploits0References3Affected Software1
Lenovo
Lenovo
•added 2020/06/04 8:32 p.m.•77 views

Intel Thunderbolt Vulnerabilities - Lenovo Support US

Lenovo Security Advisory: LEN-31390 Potential Impact: Information disclosure, privilege escalation Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-14630 Summary Description: Intel reported potential security vulnerabilities, requiring physical access and dedicated equipment...

2.1CVSS2.3AI score0.00338EPSS
SaveExploits0
Rows per page
Query Builder