{"id": "CVE-2020-12289", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2021-06-09T19:15:08.347", "references": [{"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00401.html", "tags": ["Vendor Advisory"], "source": "secure@intel.com"}, {"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00401.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "Out-of-bounds write in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access."}, {"lang": "es", "value": "Una escritura fuera de l\u00edmites en algunos controladores Intel\u00ae Thunderbolt\u2122 puede permitir a un usuario autenticado permitir potencialmente una denegaci\u00f3n de servicio por medio de un acceso local"}], "lastModified": "2024-11-21T04:59:27.437", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:intel:jhl6240_thunderbolt_3_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "61938816-4296-4930-A056-A05EC8452392", "versionEndExcluding": "21"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:intel:jhl6240_thunderbolt_3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3B913051-17BA-40D2-B0BF-61982D8D1B82"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:intel:jhl6340_thunderbolt_3_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0446898C-1AB6-41F0-9394-0FB6383D8821", "versionEndExcluding": "46"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:intel:jhl6340_thunderbolt_3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "346BAE25-F11A-43A3-A1BF-91C18E03098B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:intel:jhl6540_thunderbolt_3_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2DBF52A8-E9F7-4031-B4A5-7EA046F93924", "versionEndExcluding": "46"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:intel:jhl6540_thunderbolt_3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "783003E4-B8C7-4EBF-9EB5-1826B8628346"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:intel:jhl7040_thunderbolt_3_retimer_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ACC6F053-A42A-4D63-8476-F0BDBCA17D19", "versionEndExcluding": "22"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:intel:jhl7040_thunderbolt_3_retimer:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "46A52B51-4ADF-42C8-828A-76E7F7B40752"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:intel:jhl7340_thunderbolt_3_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "36DCCACC-F618-4D0E-B195-4AB6027C747F", "versionEndExcluding": "60"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:intel:jhl7340_thunderbolt_3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "ED17AEEC-5CA0-4EE1-A269-67E07DB5AFF0"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:intel:jhl7440_thunderbolt_3_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F61C222F-CF75-4433-B992-06A1FC503E7A", "versionEndExcluding": "60"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:intel:jhl7440_thunderbolt_3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3A0CF918-FEBE-4D9F-9A55-FD5F84FFF684"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:intel:jhl7540_thunderbolt_3_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "525AA862-74C1-43B5-83CC-55BF9DB19351", "versionEndExcluding": "60"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:intel:jhl7540_thunderbolt_3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8A8D32FB-085E-41F8-AF21-697EC31E46BD"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:intel:jhl8010r_usb_retimer_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FA9065C1-199D-46BE-B685-02560C6155BD", "versionEndExcluding": "41"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:intel:jhl8010r_usb_retimer:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9C4D713F-153A-4E55-BC68-697B25D42B82"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:intel:dsl5320_thunderbolt_2_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6C06F6AB-5D9F-42C3-88C4-891F49967315"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:intel:dsl5320_thunderbolt_2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8F506639-8288-47ED-A92C-285FCC22F626"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:intel:dsl5520_thunderbolt_2_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ABB4291E-F7E3-40ED-9D10-EBD0802B8385"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:intel:dsl5520_thunderbolt_2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1EE5B0E1-B822-494B-9ACE-A497FD0E0FC3"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:intel:dsl6340_thunderbolt_3_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0ADF0AE9-8B9A-467A-8E7E-80138CD25932"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:intel:dsl6340_thunderbolt_3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AFFA5F6D-B544-4AB7-A63A-A192C6909CCF"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:intel:dsl6540_thunderbolt_3_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "945E551B-3E0B-4035-B8EE-27D403499AD7"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:intel:dsl6540_thunderbolt_3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D1C149B1-546E-4527-8370-F0300B1C9B55"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:intel:jhl8040r_thunderbolt_4_retimer_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "063A9467-357F-44D8-B530-B777453C33A1", "versionEndExcluding": "41"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:intel:jhl8040r_thunderbolt_4_retimer:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1D4FBFBC-187F-4813-9C9D-6A3F6C6A4D3C"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "secure@intel.com"}