Advisory Published
Updated

CVE-2020-12288

First published: Wed Jun 09 2021(Updated: )

Protection mechanism failure in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.

Credit: secure@intel.com

Affected SoftwareAffected VersionHow to fix
Intel jhl6240 Thunderbolt 3<21
Intel JHL6240 Thunderbolt 3
Intel JHL6340 Firmware<46
Intel JHL6340
Intel JHL6540 Thunderbolt 3<46
Intel JHL6540 Thunderbolt 3
Intel JHL7040 Thunderbolt 3 Retimer Firmware<22
Intel JHL7040 Thunderbolt 3 Retimer Firmware
Intel JHL7340 Firmware<60
Intel JHL7340
Intel JHL7440 Thunderbolt 3<60
Intel JHL7440
Intel Jhl7540 Firmware<60
Intel Jhl7540 Thunderbolt 3
Intel JHL8010R USB Retimer<41
Intel JHL8010r USB Retimer Firmware
Intel DSL5320 Thunderbolt 2
Intel DSL5320 Thunderbolt 2 Firmware
Intel DSL5520 Thunderbolt 2 Firmware
Intel DSL5520 Thunderbolt 2 Firmware
Intel DSL6340 Thunderbolt 3 firmware
Intel DSL6340 Thunderbolt 3 firmware
Intel DSL6540 Thunderbolt 3
Intel DSL6540 Thunderbolt 3
Intel JHL8040R Thunderbolt 4 Retimer<41
Intel JHL8040R Thunderbolt 4 Retimer Firmware

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is CVE-2020-12288?

    CVE-2020-12288 is a vulnerability that refers to a protection mechanism failure in some Intel(R) Thunderbolt(TM) controllers, allowing an authenticated user to potentially enable denial of service via local access.

  • How severe is CVE-2020-12288?

    CVE-2020-12288 has a severity score of 5.5 out of 10, indicating a medium severity.

  • Which versions of Intel Thunderbolt firmware are affected by CVE-2020-12288?

    CVE-2020-12288 affects Intel Jhl6240 Thunderbolt 3 Firmware up to version 21, Intel Jhl6340 Thunderbolt 3 Firmware up to version 46, Intel Jhl6540 Thunderbolt 3 Firmware up to version 46, Intel Jhl7040 Thunderbolt 3 Retimer Firmware up to version 22, Intel Jhl7340 Thunderbolt 3 Firmware up to version 60, Intel Jhl7440 Thunderbolt 3 Firmware up to version 60, Intel Jhl7540 Thunderbolt 3 Firmware up to version 60, Intel Jhl8010r Usb Retimer Firmware up to version 41, Intel Dsl5320 Thunderbolt 2 Firmware, Intel Dsl5520 Thunderbolt 2 Firmware, Intel Dsl6340 Thunderbolt 3 Firmware, Intel Dsl6540 Thunderbolt 3 Firmware, and Intel Jhl8040r Thunderbolt 4 Retimer Firmware up to version 41.

  • How can an authenticated user exploit CVE-2020-12288?

    An authenticated user can potentially enable denial of service via local access due to the protection mechanism failure in the affected Intel Thunderbolt controllers.

  • Where can I find more information about CVE-2020-12288?

    You can find more information about CVE-2020-12288 at the following link: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00401.html

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203