CVE-2020-12296 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5.5 MEDIUM	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 15%

Affected Products (NVD)

Vendor	Product	Version
intel	dsl5320_thunderbolt_2_firmware	*
intel	dsl5520_thunderbolt_2_firmware	*
intel	dsl6340_thunderbolt_3_firmware	*
intel	dsl6540_thunderbolt_3_firmware	*
intel	jhl6240_thunderbolt_3_firmware	𝑥 < 21
intel	jhl6340_thunderbolt_3_firmware	𝑥 < 46
intel	jhl6540_thunderbolt_3_firmware	𝑥 < 46
intel	jhl7040_thunderbolt_3_retimer_firmware	𝑥 < 22
intel	jhl7340_thunderbolt_3_firmware	𝑥 < 60
intel	jhl7440_thunderbolt_3_firmware	𝑥 < 60
intel	jhl7540_thunderbolt_3_firmware	𝑥 < 60
intel	jhl8010r_usb_retimer_firmware	𝑥 < 41
intel	jhl8040r_thunderbolt_4_retimer_firmware	𝑥 < 41

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-400 - Uncontrolled Resource Consumption
The software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00401.html

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00401.html