Information Disclosure Vulnerability in Intel Thunderbolt DCH Drivers
CVE-2020-12326

5.5MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Thunderbolt(tm) Dch Drivers For Windows*
Vendor
CVE Published:
12 November 2020

What is CVE-2020-12326?

An improper initialization vulnerability exists in various Intel Thunderbolt DCH drivers for Windows, specifically affecting versions prior to 72. This flaw may enable an authenticated user to potentially access sensitive information through local interactions with the system. This risk underscores the importance of keeping drivers updated and implementing robust access controls to mitigate potential information disclosure threats.

Affected Version(s)

Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.