Intel JHL8010R USB Retimer Firmware vulnerabilities

9 CVEs affecting Intel JHL8010R USB Retimer Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-12296, published 2021-06-09.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-12296, published 2021-06-09. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.
• CVE-2020-12295, published 2021-06-09. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper input validation in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.
• CVE-2020-12294, published 2021-06-09. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Insufficient control flow management in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.
• CVE-2020-12293, published 2021-06-09. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper control of a resource through its lifetime in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.
• CVE-2020-12292, published 2021-06-09. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper conditions check in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.
• CVE-2020-12291, published 2021-06-09. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.
• CVE-2020-12290, published 2021-06-09. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper access control in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.
• CVE-2020-12289, published 2021-06-09. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Out-of-bounds write in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.
• CVE-2020-12288, published 2021-06-09. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Protection mechanism failure in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.