2024-08-14 16:03:15 +00:00
{
"id" : "CVE-2024-25561" ,
"sourceIdentifier" : "secure@intel.com" ,
"published" : "2024-08-14T14:15:22.827" ,
2025-02-25 21:04:20 +00:00
"lastModified" : "2025-02-25T19:32:00.993" ,
2024-09-12 20:03:17 +00:00
"vulnStatus" : "Analyzed" ,
2024-08-14 16:03:15 +00:00
"cveTags" : [ ] ,
"descriptions" : [
{
"lang" : "en" ,
"value" : "Insecure inherited permissions in some Intel(R) HID Event Filter software installers before version 2.2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access."
2024-08-18 02:03:12 +00:00
} ,
{
"lang" : "es" ,
"value" : " Los permisos heredados inseguros en algunos instaladores del software Intel(R) HID Event Filter anteriores a la versi\u00f3n 2.2.2.1 pueden permitir que un usuario autenticado habilite potencialmente la escalada de privilegios a trav\u00e9s del acceso local."
2024-08-14 16:03:15 +00:00
}
] ,
"metrics" : {
"cvssMetricV40" : [
{
"source" : "secure@intel.com" ,
"type" : "Secondary" ,
"cvssData" : {
"version" : "4.0" ,
"vectorString" : "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 5.4 ,
"baseSeverity" : "MEDIUM" ,
2024-08-14 16:03:15 +00:00
"attackVector" : "LOCAL" ,
"attackComplexity" : "HIGH" ,
"attackRequirements" : "PRESENT" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "ACTIVE" ,
2025-03-02 03:03:52 +00:00
"vulnConfidentialityImpact" : "HIGH" ,
"vulnIntegrityImpact" : "HIGH" ,
"vulnAvailabilityImpact" : "HIGH" ,
"subConfidentialityImpact" : "NONE" ,
"subIntegrityImpact" : "NONE" ,
"subAvailabilityImpact" : "NONE" ,
2024-08-14 16:03:15 +00:00
"exploitMaturity" : "NOT_DEFINED" ,
2025-03-02 03:03:52 +00:00
"confidentialityRequirement" : "NOT_DEFINED" ,
"integrityRequirement" : "NOT_DEFINED" ,
"availabilityRequirement" : "NOT_DEFINED" ,
2024-08-14 16:03:15 +00:00
"modifiedAttackVector" : "NOT_DEFINED" ,
"modifiedAttackComplexity" : "NOT_DEFINED" ,
"modifiedAttackRequirements" : "NOT_DEFINED" ,
"modifiedPrivilegesRequired" : "NOT_DEFINED" ,
"modifiedUserInteraction" : "NOT_DEFINED" ,
2025-03-02 03:03:52 +00:00
"modifiedVulnConfidentialityImpact" : "NOT_DEFINED" ,
"modifiedVulnIntegrityImpact" : "NOT_DEFINED" ,
"modifiedVulnAvailabilityImpact" : "NOT_DEFINED" ,
"modifiedSubConfidentialityImpact" : "NOT_DEFINED" ,
"modifiedSubIntegrityImpact" : "NOT_DEFINED" ,
"modifiedSubAvailabilityImpact" : "NOT_DEFINED" ,
"Safety" : "NOT_DEFINED" ,
"Automatable" : "NOT_DEFINED" ,
"Recovery" : "NOT_DEFINED" ,
2024-08-14 16:03:15 +00:00
"valueDensity" : "NOT_DEFINED" ,
"vulnerabilityResponseEffort" : "NOT_DEFINED" ,
2024-12-08 03:06:42 +00:00
"providerUrgency" : "NOT_DEFINED"
2024-08-14 16:03:15 +00:00
}
}
] ,
"cvssMetricV31" : [
2024-09-12 20:03:17 +00:00
{
2024-12-08 03:06:42 +00:00
"source" : "secure@intel.com" ,
"type" : "Secondary" ,
2024-09-12 20:03:17 +00:00
"cvssData" : {
"version" : "3.1" ,
2024-12-08 03:06:42 +00:00
"vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" ,
"baseScore" : 6.7 ,
"baseSeverity" : "MEDIUM" ,
2024-09-12 20:03:17 +00:00
"attackVector" : "LOCAL" ,
2024-12-08 03:06:42 +00:00
"attackComplexity" : "HIGH" ,
2024-09-12 20:03:17 +00:00
"privilegesRequired" : "LOW" ,
2024-12-08 03:06:42 +00:00
"userInteraction" : "REQUIRED" ,
2024-09-12 20:03:17 +00:00
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "HIGH"
2024-09-12 20:03:17 +00:00
} ,
2024-12-08 03:06:42 +00:00
"exploitabilityScore" : 0.8 ,
2024-09-12 20:03:17 +00:00
"impactScore" : 5.9
} ,
2024-08-14 16:03:15 +00:00
{
2024-12-08 03:06:42 +00:00
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
2024-08-14 16:03:15 +00:00
"cvssData" : {
"version" : "3.1" ,
2024-12-08 03:06:42 +00:00
"vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" ,
"baseScore" : 7.8 ,
"baseSeverity" : "HIGH" ,
2024-08-14 16:03:15 +00:00
"attackVector" : "LOCAL" ,
2024-12-08 03:06:42 +00:00
"attackComplexity" : "LOW" ,
2024-08-14 16:03:15 +00:00
"privilegesRequired" : "LOW" ,
2024-12-08 03:06:42 +00:00
"userInteraction" : "NONE" ,
2024-08-14 16:03:15 +00:00
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "HIGH"
2024-08-14 16:03:15 +00:00
} ,
2024-12-08 03:06:42 +00:00
"exploitabilityScore" : 1.8 ,
2024-08-14 16:03:15 +00:00
"impactScore" : 5.9
}
]
} ,
"weaknesses" : [
2024-09-12 20:03:17 +00:00
{
2024-12-08 03:06:42 +00:00
"source" : "secure@intel.com" ,
"type" : "Secondary" ,
2024-09-12 20:03:17 +00:00
"description" : [
{
"lang" : "en" ,
2024-12-08 03:06:42 +00:00
"value" : "CWE-277"
2024-09-12 20:03:17 +00:00
}
]
} ,
2024-08-14 16:03:15 +00:00
{
2024-12-08 03:06:42 +00:00
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
2024-08-14 16:03:15 +00:00
"description" : [
{
"lang" : "en" ,
2024-12-08 03:06:42 +00:00
"value" : "CWE-732"
2024-08-14 16:03:15 +00:00
}
]
}
] ,
2024-09-12 20:03:17 +00:00
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
2025-02-25 21:04:20 +00:00
"criteria" : "cpe:2.3:a:intel:hid_event_filter_driver:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "2.2.2.1" ,
"matchCriteriaId" : "C554A3D3-59AE-4C44-A1ED-B292C4720A16"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
2024-09-12 20:03:17 +00:00
{
"vulnerable" : true ,
2025-02-25 21:04:20 +00:00
"criteria" : "cpe:2.3:o:intel:nuc_m15_laptop_kit_lapbc510_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "393326E2-AF17-45EE-A709-2E439F3D0A1A"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:intel:nuc_m15_laptop_kit_lapbc510:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "29817A9E-9FDE-421B-950A-4053F9D22FD1"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
2024-09-12 20:03:17 +00:00
{
"vulnerable" : true ,
2025-02-25 21:04:20 +00:00
"criteria" : "cpe:2.3:o:intel:nuc_m15_laptop_kit_lapbc710_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7E885560-7FA9-43E6-A059-B7CD9BC3A1FA"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:intel:nuc_m15_laptop_kit_lapbc710:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7074EC4C-7096-47D1-9CA8-9C4784DBF72D"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
2024-09-12 20:03:17 +00:00
{
"vulnerable" : true ,
2025-02-25 21:04:20 +00:00
"criteria" : "cpe:2.3:o:intel:nuc_m15_laptop_kit_laprc510_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DE0ACCD2-72BB-4A06-A7DF-7ACD1E46D11A"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:intel:nuc_m15_laptop_kit_laprc510:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C360F23D-BA90-49BA-99B1-CAB1F678276D"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
2024-09-12 20:03:17 +00:00
{
"vulnerable" : true ,
2025-02-25 21:04:20 +00:00
"criteria" : "cpe:2.3:o:intel:nuc_m15_laptop_kit_laprc710_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A66D81FB-4997-4E62-9398-0A0626A7E20E"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:intel:nuc_m15_laptop_kit_laprc710:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6DC7D157-539A-4C86-8F23-F0AE857A553C"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
2024-09-12 20:03:17 +00:00
{
"vulnerable" : true ,
2025-02-25 21:04:20 +00:00
"criteria" : "cpe:2.3:o:intel:nuc_x15_laptop_kit_lapac71g_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "EB043BDD-72F5-44FA-AEFB-F966A1D287D5"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
2024-09-12 20:03:17 +00:00
"criteria" : "cpe:2.3:h:intel:nuc_x15_laptop_kit_lapac71g:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9BA0DECB-3644-442B-AC63-EE46CF7B07F7"
2025-02-25 21:04:20 +00:00
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
2024-09-12 20:03:17 +00:00
{
"vulnerable" : true ,
2025-02-25 21:04:20 +00:00
"criteria" : "cpe:2.3:o:intel:nuc_x15_laptop_kit_lapac71h_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "17397708-15A1-4CB6-A929-00C368A1A0CB"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
2024-09-12 20:03:17 +00:00
"criteria" : "cpe:2.3:h:intel:nuc_x15_laptop_kit_lapac71h:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DB9504CD-2AE3-4A6C-8C51-5964A7D7978F"
2025-02-25 21:04:20 +00:00
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
2024-09-12 20:03:17 +00:00
{
"vulnerable" : true ,
2025-02-25 21:04:20 +00:00
"criteria" : "cpe:2.3:o:intel:nuc_x15_laptop_kit_lapkc51e_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2AFE57A6-0411-47DF-B150-A075284122C2"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
2024-09-12 20:03:17 +00:00
"criteria" : "cpe:2.3:h:intel:nuc_x15_laptop_kit_lapkc51e:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D173030A-3731-4146-B717-86B29D5542B9"
2025-02-25 21:04:20 +00:00
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
2024-09-12 20:03:17 +00:00
{
"vulnerable" : true ,
2025-02-25 21:04:20 +00:00
"criteria" : "cpe:2.3:o:intel:nuc_x15_laptop_kit_lapkc71e_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A819B6E4-4522-4A8A-A146-DE28BF61D740"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
2024-09-12 20:03:17 +00:00
"criteria" : "cpe:2.3:h:intel:nuc_x15_laptop_kit_lapkc71e:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CC56D54E-22B5-4900-BF8B-A04B52EAB61C"
2025-02-25 21:04:20 +00:00
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
2024-09-12 20:03:17 +00:00
{
"vulnerable" : true ,
2025-02-25 21:04:20 +00:00
"criteria" : "cpe:2.3:o:intel:nuc_x15_laptop_kit_lapkc71f_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A58501AD-123A-42DD-B7EC-FF3B209A60EA"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
2024-09-12 20:03:17 +00:00
"criteria" : "cpe:2.3:h:intel:nuc_x15_laptop_kit_lapkc71f:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "EFCC3439-B37C-46F5-9C11-D4ECBBB8CFB7"
}
]
}
]
}
] ,
2024-08-14 16:03:15 +00:00
"references" : [
{
"url" : "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01089.html" ,
2024-09-12 20:03:17 +00:00
"source" : "secure@intel.com" ,
"tags" : [
"Vendor Advisory"
]
2024-08-14 16:03:15 +00:00
}
]
}