Intel DSL6540 Thunderbolt 3 Firmware vulnerabilities

10 CVEs affecting Intel DSL6540 Thunderbolt 3 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-12296, published 2021-06-09.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-14630, published 2020-08-13. Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days. Reliance on untrusted inputs in a security decision in some Intel(R) Thunderbolt(TM) controllers may allow unauthenticated user to potentially enable information disclosure via physical access.
• CVE-2020-12296, published 2021-06-09. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.
• CVE-2020-12295, published 2021-06-09. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper input validation in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.
• CVE-2020-12294, published 2021-06-09. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Insufficient control flow management in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.
• CVE-2020-12293, published 2021-06-09. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper control of a resource through its lifetime in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.
• CVE-2020-12292, published 2021-06-09. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper conditions check in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.
• CVE-2020-12291, published 2021-06-09. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.
• CVE-2020-12290, published 2021-06-09. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper access control in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.
• CVE-2020-12289, published 2021-06-09. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Out-of-bounds write in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.
• CVE-2020-12288, published 2021-06-09. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Protection mechanism failure in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.