CVEvulnerability

CVE-2024-25561

5.4 MEDIUM Published 2024-08-14 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-08-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 4.0 ([email protected])
5.4 MEDIUM — CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-277, CWE-732

Description

Insecure inherited permissions in some Intel(R) HID Event Filter software installers before version 2.2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected configurations

• intel hid event filter driver (< 2.2.2.1) • intel nuc m15 laptop kit lapbc510 firmware • intel nuc m15 laptop kit lapbc710 firmware • intel nuc m15 laptop kit laprc510 firmware • intel nuc m15 laptop kit laprc710 firmware • intel nuc x15 laptop kit lapac71g firmware • intel nuc x15 laptop kit lapac71h firmware • intel nuc x15 laptop kit lapkc51e firmware • intel nuc x15 laptop kit lapkc71e firmware • intel nuc x15 laptop kit lapkc71f firmware

Related

Weakness · CWE (2)

  • CWE-277 Insecure Inherited Permissions weakness
  • CWE-732 Incorrect Permission Assignment for Critical Resource weakness

References