CVE-2020-12291
Medium
Description
Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.
SeverityMedium
CVSS5.5
Exploit probability—
ProductIntel Jhl6240 Thunderbolt 3 Firmware
PublishedJun 9, 2021
First seenJun 9, 2021
How to fix
Update
- intel jhl6240_thunderbolt_3_firmware21 or later
- intel jhl6340_thunderbolt_3_firmware46 or later
- intel jhl6540_thunderbolt_3_firmware46 or later
- intel jhl7040_thunderbolt_3_retimer_firmware22 or later
- intel jhl7340_thunderbolt_3_firmware60 or later
- intel jhl7440_thunderbolt_3_firmware60 or later
- intel jhl7540_thunderbolt_3_firmware60 or later
- intel jhl8010r_usb_retimer_firmware41 or later
- intel jhl8040r_thunderbolt_4_retimer_firmware41 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel jhl6240_thunderbolt_3_firmware | v < 21 | 21 |
| intel jhl6340_thunderbolt_3_firmware | v < 46 | 46 |
| intel jhl6540_thunderbolt_3_firmware | v < 46 | 46 |
| intel jhl7040_thunderbolt_3_retimer_firmware | v < 22 | 22 |
| intel jhl7340_thunderbolt_3_firmware | v < 60 | 60 |
| intel jhl7440_thunderbolt_3_firmware | v < 60 | 60 |
| intel jhl7540_thunderbolt_3_firmware | v < 60 | 60 |
| intel jhl8010r_usb_retimer_firmware | v < 41 | 41 |
| intel dsl5320_thunderbolt_2_firmware | No range specified | — |
| intel dsl5520_thunderbolt_2_firmware | No range specified | — |
| intel dsl6340_thunderbolt_3_firmware | No range specified | — |
| intel dsl6540_thunderbolt_3_firmware | No range specified | — |
| intel jhl8040r_thunderbolt_4_retimer_firmware | v < 41 | 41 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.