CVE-2020-12327: Medium severity intel thunderbolt dch driver for windows vulnerability
Insecure default variable initialization in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 72 may allow a privileged user to potentially enable information disclosure via local access.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Intel Thunderbolt DCH driver vulnerability?
The vulnerability ID for this Intel Thunderbolt DCH driver vulnerability is CVE-2020-12327.
What is the title of this vulnerability?
The title of this vulnerability is 'Insecure default variable initialization in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* b…'
What is the description of this vulnerability?
The description of this vulnerability is that insecure default variable initialization in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow a privileged user to potentially enable information disclosure via local access.
What is the severity of CVE-2020-12327?
The severity of CVE-2020-12327 is medium with a CVSS score of 4.4.
What is the affected software for this vulnerability?
The affected software for this vulnerability is Intel Thunderbolt DCH driver version up to (but not including) 72 on Windows.
Is there a fix available for CVE-2020-12327?
Yes, Intel has released a fix for CVE-2020-12327. Please refer to the Intel Security Advisory for more information.