← Back

CVE-2024-25561

nvd nist
Published: Aug 14, 2024Modified: Jun 17, 2026

JSON object

Loading...
5.4
Vector
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Show more
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less
Source: secure@intel.com (Secondary)

Description

Insecure inherited permissions in some Intel(R) HID Event Filter software installers before version 2.2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected (10)

Intel
10 products
Hid Event Filter Driver
Nuc M15 Laptop Kit Lapbc510 Firmware
Nuc M15 Laptop Kit Lapbc710 Firmware
Nuc M15 Laptop Kit Laprc510 Firmware
Nuc M15 Laptop Kit Laprc710 Firmware
Nuc X15 Laptop Kit Lapac71g Firmware
Nuc X15 Laptop Kit Lapac71h Firmware
Nuc X15 Laptop Kit Lapkc51e Firmware
Nuc X15 Laptop Kit Lapkc71e Firmware
Nuc X15 Laptop Kit Lapkc71f Firmware
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Hid Event Filter Driver
Before 2.2.2.1
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nuc M15 Laptop Kit Lapbc510 Firmware
All versions
Running on/withPlatform Versions
Intel
Nuc M15 Laptop Kit Lapbc510
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nuc M15 Laptop Kit Lapbc710 Firmware
All versions
Running on/withPlatform Versions
Intel
Nuc M15 Laptop Kit Lapbc710
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nuc M15 Laptop Kit Laprc510 Firmware
All versions
Running on/withPlatform Versions
Intel
Nuc M15 Laptop Kit Laprc510
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nuc M15 Laptop Kit Laprc710 Firmware
All versions
Running on/withPlatform Versions
Intel
Nuc M15 Laptop Kit Laprc710
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nuc X15 Laptop Kit Lapac71g Firmware
All versions
Running on/withPlatform Versions
Intel
Nuc X15 Laptop Kit Lapac71g
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nuc X15 Laptop Kit Lapac71h Firmware
All versions
Running on/withPlatform Versions
Intel
Nuc X15 Laptop Kit Lapac71h
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nuc X15 Laptop Kit Lapkc51e Firmware
All versions
Running on/withPlatform Versions
Intel
Nuc X15 Laptop Kit Lapkc51e
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nuc X15 Laptop Kit Lapkc71e Firmware
All versions
Running on/withPlatform Versions
Intel
Nuc X15 Laptop Kit Lapkc71e
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nuc X15 Laptop Kit Lapkc71f Firmware
All versions
Running on/withPlatform Versions
Intel
Nuc X15 Laptop Kit Lapkc71f
All versions

Related CWEs

CWE-277
Insecure Inherited Permissions
A product defines a set of insecure permissions that are inherited by objects that are created by the program.
CWE-732
Incorrect Permission Assignment for Critical Resource
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (1)

Source: secure@intel.com
Vendor Advisory

Timeline

No history available yet.