Skip to main content

Hid Event Filter Driver CVE-2024-25561

MEDIUM
Insecure Inherited Permissions (CWE-277)
2024-08-14 secure@intel.com
Privilege Escalation Intel Hid Event Filter Driver Nuc M15 Laptop Kit Lapbc510 Firmware Nuc M15 Laptop Kit Lapbc710 Firmware Nuc M15 Laptop Kit Laprc510 Firmware Nuc M15 Laptop Kit Laprc710 Firmware Nuc X15 Laptop Kit Lapac71G Firmware Nuc X15 Laptop Kit Lapac71H Firmware Nuc X15 Laptop Kit Lapkc51E Firmware Nuc X15 Laptop Kit Lapkc71E Firmware Nuc X15 Laptop Kit Lapkc71F Firmware
5.4
CVSS 4.0 · Vendor: intel
Share

Severity by source

Vendor (intel) PRIMARY
5.4 MEDIUM
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (intel) · only source for this CVE.

CVSS VectorVendor: intel

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Local
Attack Complexity
High
Privileges Required
Low
User Interaction
A
Scope
X

Lifecycle Timeline

1
CVE Published
Aug 14, 2024 - 14:15 cve.org
MEDIUM 5.4

DescriptionCVE.org

Insecure inherited permissions in some Intel(R) HID Event Filter software installers before version 2.2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

AnalysisAI

Insecure inherited permissions in some Intel(R) HID Event Filter software installers before version 2.2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local. Rated medium severity (CVSS 5.4). No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-277. Insecure inherited permissions in some Intel(R) HID Event Filter software installers before version 2.2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Affected products include: Intel Hid Event Filter Driver, Intel Nuc M15 Laptop Kit Lapbc510 Firmware, Intel Nuc M15 Laptop Kit Lapbc710 Firmware, Intel Nuc M15 Laptop Kit Laprc510 Firmware, Intel Nuc M15 Laptop Kit Laprc710 Firmware. Version information: version 2.2.2.1.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Hid Event Filter Driver

View all
CVE-2020-12332 HIGH
7.8 Nov 12

Improper permissions in the installer for the Intel(R) HID Event Filter Driver, all versions, may allow an authenticated
CVE-2023-33874 HIGH
7.3 Nov 14

Uncontrolled search path in some Intel(R) NUC 12 Pro Kits & Mini PCs - NUC12WS Intel(R) HID Event Filter Driver installa

Same weakness CWE-277 – Insecure Inherited Permissions

View all
CVE-2024-27822 HIGH POC
7.8
CVE-2023-27842 HIGH POC
8.8
CVE-2025-58437 HIGH POC
8.1
CVE-2025-56019 MEDIUM POC
6.5
CVE-2024-36540 CRITICAL
9.8
CVE-2024-36539 CRITICAL
9.8
CVE-2024-27834 MEDIUM POC
5.5
CVE-2021-24031 MEDIUM POC
5.5

Same technique Privilege Escalation

View all
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-0422 CRITICAL POC
9.8
CVE-2013-0632 CRITICAL POC
9.8
CVE-2017-5689 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8
CVE-2016-10372 CRITICAL POC
9.8
CVE-2014-9583 CRITICAL POC
10.0
CVE-2012-0297 CRITICAL POC
10.0

Share

CVE-2024-25561 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy