First published: Wed Jun 09 2021(Updated: )
Insufficient control flow management in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.
Credit: secure@intel.com
Affected Software | Affected Version | How to fix |
---|---|---|
Intel jhl6240 Thunderbolt 3 | <21 | |
Intel JHL6240 Thunderbolt 3 | ||
Intel JHL6340 Firmware | <46 | |
Intel JHL6340 | ||
Intel JHL6540 Thunderbolt 3 | <46 | |
Intel JHL6540 Thunderbolt 3 | ||
Intel JHL7040 Thunderbolt 3 Retimer Firmware | <22 | |
Intel JHL7040 Thunderbolt 3 Retimer Firmware | ||
Intel JHL7340 Firmware | <60 | |
Intel JHL7340 | ||
Intel JHL7440 Thunderbolt 3 | <60 | |
Intel JHL7440 | ||
Intel Jhl7540 Firmware | <60 | |
Intel Jhl7540 Thunderbolt 3 | ||
Intel JHL8010R USB Retimer | <41 | |
Intel JHL8010r USB Retimer Firmware | ||
Intel DSL5320 Thunderbolt 2 | ||
Intel DSL5320 Thunderbolt 2 Firmware | ||
Intel DSL5520 Thunderbolt 2 Firmware | ||
Intel DSL5520 Thunderbolt 2 Firmware | ||
Intel DSL6340 Thunderbolt 3 firmware | ||
Intel DSL6340 Thunderbolt 3 firmware | ||
Intel DSL6540 Thunderbolt 3 | ||
Intel DSL6540 Thunderbolt 3 | ||
Intel JHL8040R Thunderbolt 4 Retimer | <41 | |
Intel JHL8040R Thunderbolt 4 Retimer Firmware |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2020-12294 is medium with a severity value of 5.5.
CVE-2020-12294 may allow an authenticated user to potentially enable denial of service via local access on some Intel Thunderbolt controllers.
The following Intel Thunderbolt controllers are affected by CVE-2020-12294: Intel Jhl6240 Thunderbolt 3 Firmware, Intel Jhl6340 Thunderbolt 3 Firmware, Intel Jhl6540 Thunderbolt 3 Firmware, Intel Jhl7040 Thunderbolt 3 Retimer Firmware, Intel Jhl7340 Thunderbolt 3 Firmware, Intel Jhl7440 Thunderbolt 3 Firmware, Intel Jhl7540 Thunderbolt 3 Firmware, Intel Jhl8010r Usb Retimer Firmware, Intel Dsl5320 Thunderbolt 2 Firmware, Intel Dsl5520 Thunderbolt 2 Firmware, Intel Dsl6340 Thunderbolt 3 Firmware, Intel Dsl6540 Thunderbolt 3 Firmware, Intel Jhl8040r Thunderbolt 4 Retimer Firmware.
To fix CVE-2020-12294, it is recommended to update to the latest firmware version provided by Intel.
You can find more information about CVE-2020-12294 on the official Intel Security Center Advisory page: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00401.html