CVE-2024-25561

Published Aug 14, 2024 CVSS 4.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Description
Insecure inherited permissions in some Intel(R) HID Event Filter software installers before version 2.2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2024-22889 Insecure inherited permissions in some Intel(R) HID Event Filter software installers before version 2.2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
History
Type Values Removed Values Added
First Time appeared Intel nuc M15 Laptop Kit Lapbc510 Firmware
Intel nuc M15 Laptop Kit Lapbc710 Firmware
Intel nuc M15 Laptop Kit Laprc510 Firmware
Intel nuc M15 Laptop Kit Laprc710 Firmware
Intel nuc X15 Laptop Kit Lapac71g Firmware
Intel nuc X15 Laptop Kit Lapac71h Firmware
Intel nuc X15 Laptop Kit Lapkc51e Firmware
Intel nuc X15 Laptop Kit Lapkc71e Firmware
Intel nuc X15 Laptop Kit Lapkc71f Firmware
CPEs cpe:2.3:a:intel:hid_event_filter_driver:2.2.2.1:*:*:*:*:*:*:*
cpe:2.3:a:intel:nuc_m15_laptop_kit_lapbc510:-:*:*:*:*:*:*:*
cpe:2.3:a:intel:nuc_m15_laptop_kit_lapbc710:-:*:*:*:*:*:*:*
cpe:2.3:a:intel:nuc_m15_laptop_kit_laprc510:-:*:*:*:*:*:*:*
cpe:2.3:a:intel:nuc_m15_laptop_kit_laprc710:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_m15_laptop_kit_lapbc510:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_m15_laptop_kit_lapbc710:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_m15_laptop_kit_laprc510:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_m15_laptop_kit_laprc710:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc_m15_laptop_kit_lapbc510_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc_m15_laptop_kit_lapbc710_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc_m15_laptop_kit_laprc510_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc_m15_laptop_kit_laprc710_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc_x15_laptop_kit_lapac71g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc_x15_laptop_kit_lapac71h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc_x15_laptop_kit_lapkc51e_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc_x15_laptop_kit_lapkc71e_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc_x15_laptop_kit_lapkc71f_firmware:-:*:*:*:*:*:*:*
Vendors & Products Intel nuc M15 Laptop Kit Lapbc510 Firmware
Intel nuc M15 Laptop Kit Lapbc710 Firmware
Intel nuc M15 Laptop Kit Laprc510 Firmware
Intel nuc M15 Laptop Kit Laprc710 Firmware
Intel nuc X15 Laptop Kit Lapac71g Firmware
Intel nuc X15 Laptop Kit Lapac71h Firmware
Intel nuc X15 Laptop Kit Lapkc51e Firmware
Intel nuc X15 Laptop Kit Lapkc71e Firmware
Intel nuc X15 Laptop Kit Lapkc71f Firmware
Type Values Removed Values Added
First Time appeared Intel nuc X15 Laptop Kit Lapkc71e
Weaknesses CWE-732
CPEs cpe:2.3:a:intel:hid_event_filter_driver:2.2.2.1:*:*:*:*:*:*:*
cpe:2.3:a:intel:nuc_m15_laptop_kit_lapbc510:-:*:*:*:*:*:*:*
cpe:2.3:a:intel:nuc_m15_laptop_kit_lapbc710:-:*:*:*:*:*:*:*
cpe:2.3:a:intel:nuc_m15_laptop_kit_laprc510:-:*:*:*:*:*:*:*
cpe:2.3:a:intel:nuc_m15_laptop_kit_laprc710:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_x15_laptop_kit_lapac71g:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_x15_laptop_kit_lapac71h:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_x15_laptop_kit_lapkc51e:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_x15_laptop_kit_lapkc71e:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_x15_laptop_kit_lapkc71f:-:*:*:*:*:*:*:*
Vendors & Products Intel nuc X15 Laptop Kit Lapkc71e
Type Values Removed Values Added
First Time appeared Intel
Intel hid Event Filter Driver
Intel nuc M15 Laptop Kit Lapbc510
Intel nuc M15 Laptop Kit Lapbc710
Intel nuc M15 Laptop Kit Laprc510
Intel nuc M15 Laptop Kit Laprc710
Intel nuc X15 Laptop Kit Lapac71g
Intel nuc X15 Laptop Kit Lapac71h
Intel nuc X15 Laptop Kit Lapkc51e
Intel nuc X15 Laptop Kit Lapkc71f
CPEs cpe:2.3:a:intel:hid_event_filter_driver:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_m15_laptop_kit_lapbc510:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_m15_laptop_kit_lapbc710:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_m15_laptop_kit_laprc510:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_m15_laptop_kit_laprc710:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_x15_laptop_kit_lapac71g:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_x15_laptop_kit_lapac71h:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_x15_laptop_kit_lapkc51e:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_x15_laptop_kit_lapkc71f:*:*:*:*:*:*:*:*
Vendors & Products Intel
Intel hid Event Filter Driver
Intel nuc M15 Laptop Kit Lapbc510
Intel nuc M15 Laptop Kit Lapbc710
Intel nuc M15 Laptop Kit Laprc510
Intel nuc M15 Laptop Kit Laprc710
Intel nuc X15 Laptop Kit Lapac71g
Intel nuc X15 Laptop Kit Lapac71h
Intel nuc X15 Laptop Kit Lapkc51e
Intel nuc X15 Laptop Kit Lapkc71f
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description Insecure inherited permissions in some Intel(R) HID Event Filter software installers before version 2.2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
Weaknesses CWE-277
References
Metrics cvssV3_1

{'score': 6.7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 5.4, 'vector': 'CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}