CVE-2019-14630
First published: Thu Aug 13 2020(Updated: )
Reliance on untrusted inputs in a security decision in some Intel(R) Thunderbolt(TM) controllers may allow unauthenticated user to potentially enable information disclosure via physical access.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intel DSL3310 Thunderbolt Firmware | ||
| Intel DSL3310 Thunderbolt Firmware | ||
| Intel DSL3510 Thunderbolt | ||
| Intel DSL3510 Thunderbolt | ||
| Intel DSL4510 Thunderbolt | ||
| Intel DSL4510 Thunderbolt Firmware | ||
| Intel dsl4410 Thunderbolt | ||
| Intel DSL4410 Thunderbolt | ||
| Intel DSL5520 Thunderbolt 2 Firmware | ||
| Intel DSL5520 Thunderbolt 2 Firmware | ||
| Intel DSL5320 Thunderbolt 2 | ||
| Intel DSL5320 Thunderbolt 2 Firmware | ||
| Intel DSL6540 Thunderbolt 3 | ||
| Intel DSL6540 Thunderbolt 3 | ||
| Intel DSL6340 Thunderbolt 3 firmware | ||
| Intel DSL6340 Thunderbolt 3 firmware | ||
| Intel JHL6540 Thunderbolt 3 | ||
| Intel JHL6540 Thunderbolt 3 | ||
| Intel JHL6340 Firmware | ||
| Intel JHL6340 | ||
| Intel jhl6240 Thunderbolt 3 | ||
| Intel JHL6240 Thunderbolt 3 | ||
| Intel Jhl7540 Firmware | ||
| Intel Jhl7540 Thunderbolt 3 | ||
| Intel JHL7340 Firmware | ||
| Intel JHL7340 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2019-14630?
CVE-2019-14630 refers to a vulnerability in some Intel Thunderbolt controllers that may allow an unauthenticated user to potentially enable information disclosure via physical access.
Which software are affected by CVE-2019-14630?
The Intel Dsl3310 Thunderbolt Firmware, Intel Dsl3510 Thunderbolt Firmware, Intel Dsl4510 Thunderbolt Firmware, Intel Dsl4410 Thunderbolt Firmware, Intel Dsl5520 Thunderbolt 2 Firmware, Intel Dsl5320 Thunderbolt 2 Firmware, Intel Dsl6540 Thunderbolt 3 Firmware, Intel Dsl6340 Thunderbolt 3 Firmware, Intel Jhl6540 Thunderbolt 3 Firmware, Intel Jhl6340 Thunderbolt 3 Firmware, Intel Jhl6240 Thunderbolt 3 Firmware, Intel Jhl7540 Thunderbolt 3 Firmware, and Intel Jhl7340 Thunderbolt 3 Firmware are affected.
How severe is CVE-2019-14630?
CVE-2019-14630 has a severity value of 4.6, which is considered medium.
What is the official reference for CVE-2019-14630?
You can find the official reference for CVE-2019-14630 at this [link](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00411.html).
How do I mitigate the CVE-2019-14630 vulnerability?
To mitigate the CVE-2019-14630 vulnerability, it is recommended to apply the latest firmware updates provided by Intel.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/references
- agent/last-modified-date
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/intel
- canonical/intel dsl3310 thunderbolt firmware
- canonical/intel dsl3510 thunderbolt
- canonical/intel dsl4510 thunderbolt
- canonical/intel dsl4510 thunderbolt firmware
- canonical/intel dsl4410 thunderbolt
- canonical/intel dsl5520 thunderbolt 2 firmware
- canonical/intel dsl5320 thunderbolt 2
- canonical/intel dsl5320 thunderbolt 2 firmware
- canonical/intel dsl6540 thunderbolt 3
- canonical/intel dsl6340 thunderbolt 3 firmware
- canonical/intel jhl6540 thunderbolt 3
- canonical/intel jhl6340 firmware
- canonical/intel jhl6340
- canonical/intel jhl6240 thunderbolt 3
- canonical/intel jhl7540 firmware
- canonical/intel jhl7540 thunderbolt 3
- canonical/intel jhl7340 firmware
- canonical/intel jhl7340