CVE-2019-14630
4.6
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 0.9 / Impact: 3.6
Source: NVD
Description
Reliance on untrusted inputs in a security decision in some Intel(R) Thunderbolt(TM) controllers may allow unauthenticated user to potentially enable information disclosure via physical access.
Affected (13)
Products: Intel: Dsl3310 Thunderbolt Firmware, Dsl3510 Thunderbolt Firmware, Dsl4510 Thunderbolt Firmware, Dsl4410 Thunderbolt Firmware, Dsl5520 Thunderbolt 2 Firmware, Dsl5320 Thunderbolt 2 Firmware, Dsl6540 Thunderbolt 3 Firmware, Dsl6340 Thunderbolt 3 Firmware, Jhl6540 Thunderbolt 3 Firmware, Jhl6340 Thunderbolt 3 Firmware, Jhl6240 Thunderbolt 3 Firmware, Jhl7540 Thunderbolt 3 Firmware, Jhl7340 Thunderbolt 3 Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Dsl3310 Thunderbolt | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Dsl3510 Thunderbolt | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Dsl4510 Thunderbolt | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Dsl4410 Thunderbolt | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Dsl5520 Thunderbolt 2 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Dsl5320 Thunderbolt 2 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Dsl6540 Thunderbolt 3 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Dsl6340 Thunderbolt 3 | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Jhl6540 Thunderbolt 3 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Jhl6340 Thunderbolt 3 | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Jhl6240 Thunderbolt 3 | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Jhl7540 Thunderbolt 3 | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Intel Jhl7340 Thunderbolt 3 | All versions |
References (2)
Source: secure@intel.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.