Improper access control in Intel products - CVE-2021-0110

Vulnerability identifier: #VU59220

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-0110

CWE-ID: CWE-284

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper access control. A local attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.

Intel Thunderbolt JHL6540
Intel Thunderbolt JHL6340
Intel Thunderbolt JHL6240
Intel Thunderbolt JHL7540
Intel Thunderbolt JHL7440
Intel Thunderbolt JHL7340
Intel Thunderbolt JHL8540
Intel Thunderbolt JHL8440
Intel 10th Generation Core Processors with Thunderbolt Technology
Intel 11th Generation Core Processors with Thunderbolt Technology
X1 Carbon 5th Gen - Kabylake (Type 20HR
T570 (Type 20H9
20HA) Laptop
T570 (Type 20JW
20JX) Laptop
T580 (Type 20L9
20LA) Laptop
T590 (Type 20N4
20N5) Laptop
ThinkPad X1 Tablet 3rd Gen (Type 20KJ 20KK)
20NY) Laptop
20HQ) Laptop
X1 Carbon 5th Gen - Skylake (Type 20K4
20K3) Laptop
X1 Carbon 6th Gen - (Type 20KH
20KG) Laptop
X1 Carbon 7th Gen - (Type 20QD
20QE) Laptop
X1 Carbon 7th Gen - (Type 20R1
20R2) Laptop
T480s (type 20L7
20HE) Laptop
T470 (Type 20JM
20JN) Laptop
T470s (type 20HF
20HG) Laptop
T470s (type 20JS
20JT) Laptop
T480 (Type 20L5
20L6) Laptop
X1 Carbon 8th Gen - (Type 20U9
20L8) Laptop
T490 (Type 20N2
20N3) Laptop
T490 (Type 20RY
20RX) Laptop
T490 Type 20Q9
20QH Laptop
T490s (Type 20NX
20T3) Laptop
20LG) Laptop
X1 Yoga 4th Gen (Type 20QF
20QG) Laptop
X1 Yoga 4th Gen (Type 20SA
20SB) Laptop
X1 Yoga 5th Gen (Type 20UB 20UC) Laptop
X1 Yoga 6th Gen (Type 20XY
20Y0) Laptop
X13 (Type 20T2
20LF
X13 Yoga Gen 1 Laptop
X280 (Type 20KF
20KE) Laptop
X390 (Type 20Q0
20Q1) Laptop
X390 (Type 20SC
20SD) Laptop
X390 Yoga Laptop
X1 Nano Gen 1 (Type 20UN 20UQ) Laptop
20UA) Laptop
X1 Carbon 9th Gen - (Type 20XW
20XX) Laptop
X1 Extreme 1st Gen (Type 20MF
20MG) Laptop
X1 Extreme 2nd Gen (Type 20QV
20QW) Laptop
X1 Extreme 3rd Gen (Type 20TK
20TL) Laptop
T470 (Type 20HD
X1 Titanium (Type 20QA
20QB) Laptop
X1 Yoga 2nd Gen (Type 20JD
20JE
20JF
20JG) Laptop
X1 Yoga 3rd Gen (Type 20LD
20LE
20QU) Laptop
Yoga Slim 9-14ITL05 Laptop
25 (Type 20K7) Laptop
E15 Gen 2 (Type 20TD
20TE) Laptop
L14 Gen 2 Type 20X1 20X2 Laptops
L15 Gen 2 Type 20X3 20X4 Laptop
P1 Gen 1 (Type 20MD
20ME) Laptop
P1 Gen 2 (Type 20QT
Yoga Slim 7-15ITL05 Laptop
P1 Gen 3 (type 20TH
20TJ ) Laptop
P14s Gen 1 (type 20S4
20S5) Laptop
P15 Gen 1 (type 20ST
20SU) Laptop
P15s Gen 1 (type 20T4 20T5) Laptop
ThinkPad P15v Gen 1 20TQ
20TR) Laptop
ThinkBook 14s Yoga ITL
Legion 7-15IMHg05
Legion C7-15IMH05 Laptop
Legion S7-15IMH5 Laptop
Slim 7-14ITL05 Laptop
Slim 7-15ITL05 Laptop
Slim 9-14ITL05 Laptop
ThinkBook 13s G2 ITL Laptop
ThinkBook 14 G2 ITL Laptop
ThinkBook 14s G2 ITL Laptop
P17 Gen 1 (type 20SN
ThinkBook 15 G2 ITL Laptop
Yoga 7-14ITL5 Laptop
Yoga 7-15ITL5 Laptop
Yoga 9-14ITL5 Laptop
Yoga 9-15IMH5 Laptop
Yoga Slim 7 Carbon 13ITL5
Yoga Slim 7-13ITL05 Laptop
Yoga Slim 7-14ITL05 Laptop
20S1) Laptop
20N7) Laptop
P70 Laptop
P71 (type 20HK
20HL) Laptop
P72 (type 20MB
20MC) Laptop
P73 (type 20QR
20QS) Laptop
T14 Gen 1 (type 20S0
P53s (Type 20N6
T14 Gen 1 (type 20S2
20S3) Laptop
T14s (Type 20T0
20T1) Laptop
T15 (type 20S6
20S7) Laptop
T15g Gen 1 type 20UR 20US Laptop
T15p Gen 1 type 20TN 20TM Laptop
20HC) Laptop
20SQ) Laptop
P43s (Type 20RH
20RJ) Laptop
P50 Laptop
P51 (Type 20HH
20HJ) Laptop
P51 (Type 20MM
20MN) Laptop
P51s (Type 20HB
Legion 7-15IMH05
P51s (Type 20JY
20K0) Laptop
P52 (Type 20M9
20MA) Laptop
P52s (Type 20LB
20LC) Laptop
P53 (Type 20QN
20QQ) Laptop
S540-13ITL Laptop
Slim 7-14IIL05 Laptop
Slim 7-15IIL05 Laptop
Slim 7-15IMH05 Laptop
Yoga Creator 7-15IMH05 Laptop
Yoga Slim 7-14IIL05 Laptop
Yoga Slim 7-15IIL05 Laptop
Yoga Slim 7-15IMH05 Laptop
P520 Workstation
P520c Workstation
P720 Workstation
P920 Workstation
E14 Gen 2 (Type 20TA
20TB) Laptop
ThinkPad R14 Gen 2 Type 20TC PRC
Intel Thunderbolt DCH drivers

Install updates from vendor's website.

Intel Thunderbolt DCH drivers - addressed in versions 1.41.1054.0, 1.41.1094
S540-13ITL Laptop - update to 1.41.1094.0
Slim 7-14IIL05 Laptop - update to 1.41.1134.0
Slim 7-15IIL05 Laptop - update to 1.41.1134.0
Slim 7-15IMH05 Laptop - update to 1.41.1134.0
Yoga Creator 7-15IMH05 Laptop - update to 1.41.1134.0
Yoga Slim 7-14IIL05 Laptop - update to 1.41.1134.0
Yoga Slim 7-15IIL05 Laptop - update to 1.41.1134.0
Yoga Slim 7-15IMH05 Laptop - update to 1.41.1134.0
P520 Workstation - update to 1.41.1155.0
P520c Workstation - update to 1.41.1155.0
P720 Workstation - update to 1.41.1155.0
P920 Workstation - update to 1.41.1155.0
E14 Gen 2 (Type 20TA - update to 1.41.1193.0
20TB) Laptop - update to 1.41.1193.0
ThinkPad R14 Gen 2 Type 20TC PRC - update to 1.41.1193.0

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00533.html

• Denial of service in Intel Thunderbolt Windows DCH Drivers
• Multiple vulnerabilities in Intel Thunderbolt DCH Driver for Windows