CVE-2020-12295

5.5 mediumEPSS 0.2%

Medium (5.5) in intel. EPSS 0.2% chance of exploitation in the next 30 days.

Improper input validation in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2021-06-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

intel:dsl5320_thunderbolt_2_firmware
intel:dsl5520_thunderbolt_2_firmware
intel:dsl6340_thunderbolt_3_firmware
intel:dsl6540_thunderbolt_3_firmware
intel:jhl6240_thunderbolt_3_firmware
intel:jhl6340_thunderbolt_3_firmware
intel:jhl6540_thunderbolt_3_firmware
intel:jhl7040_thunderbolt_3_retimer_firmware
intel:jhl7340_thunderbolt_3_firmware
intel:jhl7440_thunderbolt_3_firmware
intel:jhl7540_thunderbolt_3_firmware
intel:jhl8010r_usb_retimer_firmware
intel:jhl8040r_thunderbolt_4_retimer_firmware

References

Check your stack JSON