CVE-2019-14630
Medium
Description
Reliance on untrusted inputs in a security decision in some Intel(R) Thunderbolt(TM) controllers may allow unauthenticated user to potentially enable information disclosure via physical access.
SeverityMedium
CVSS4.6
Exploit probability—
ProductIntel Dsl3310 Thunderbolt Firmware
PublishedAug 13, 2020
First seenAug 13, 2020
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel dsl3310_thunderbolt_firmware | No range specified | — |
| intel dsl3510_thunderbolt_firmware | No range specified | — |
| intel dsl4510_thunderbolt_firmware | No range specified | — |
| intel dsl4410_thunderbolt_firmware | No range specified | — |
| intel dsl5520_thunderbolt_2_firmware | No range specified | — |
| intel dsl5320_thunderbolt_2_firmware | No range specified | — |
| intel dsl6540_thunderbolt_3_firmware | No range specified | — |
| intel dsl6340_thunderbolt_3_firmware | No range specified | — |
| intel jhl6540_thunderbolt_3_firmware | No range specified | — |
| intel jhl6340_thunderbolt_3_firmware | No range specified | — |
| intel jhl6240_thunderbolt_3_firmware | No range specified | — |
| intel jhl7540_thunderbolt_3_firmware | No range specified | — |
| intel jhl7340_thunderbolt_3_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.