Input Validation Vulnerability in Intel Thunderbolt Controllers
CVE-2019-14630

4.6MEDIUM

Key Information:

Vendor
Intel
Status
Intel(r) Thunderbolt(tm) Controller Advisory
Vendor
CVE Published:
13 August 2020

Summary

A security issue exists in certain Intel Thunderbolt controllers due to reliance on untrusted inputs in security decisions. This vulnerability may allow an unauthenticated user with physical access to potentially gain sensitive information, posing a risk to the integrity of secured environments. Proper measures and updates are necessary to mitigate the impact of this flaw.

Affected Version(s)

Intel(R) Thunderbolt(TM) Controller Advisory See provided reference

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_MISC

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.