CVE-2024-25561: High severity intel hid event filter vulnerability
Published Aug 14, 2024
·Updated
Insecure inherited permissions in some Intel(R) HID Event Filter software installers before version 2.2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected Software
19 affected components
Intel HID Event Filter Driver<2.2.2.1
All of the following
Intel Nuc M15 Laptop Kit Lapbc510 Firmware
Intel Nuc M15 Laptop Kit Lapbc510
All of the following
Intel Nuc M15 Laptop Kit Lapbc710 Firmware
Intel Nuc M15 Laptop Kit Lapbc710
All of the following
Intel Nuc M15 Laptop Kit Laprc510 Firmware
Intel Nuc M15 Laptop Kit Laprc510
All of the following
Intel Nuc M15 Laptop Kit Laprc710 Firmware
Intel Nuc M15 Laptop Kit Laprc710
All of the following
Intel Nuc X15 Laptop Kit Lapac71g Firmware
Intel Nuc X15 Laptop Kit Lapac71g
All of the following
Intel Nuc X15 Laptop Kit Lapac71h Firmware
Intel Nuc X15 Laptop Kit Lapac71h
All of the following
Intel Nuc X15 Laptop Kit Lapkc51e Firmware
Intel Nuc X15 Laptop Kit Lapkc51e
All of the following
Intel Nuc X15 Laptop Kit Lapkc71e Firmware
Intel Nuc X15 Laptop Kit Lapkc71e
All of the following
Intel Nuc X15 Laptop Kit Lapkc71f Firmware
Intel Nuc X15 Laptop Kit Lapkc71f
Event History
Aug 14, 2024
CVE Published
via MITRE·01:45 PM
Data Sourced
via MITRE·01:45 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-25561?
CVE-2024-25561 is classified as a moderate severity vulnerability due to its potential for privilege escalation.
2
How do I fix CVE-2024-25561?
To mitigate CVE-2024-25561, upgrade to the Intel HID Event Filter software version 2.2.2.1 or later.
3
Who is affected by CVE-2024-25561?
Users of Intel HID Event Filter software installers prior to version 2.2.2.1 may be affected by CVE-2024-25561.
4
What type of vulnerability is CVE-2024-25561?
CVE-2024-25561 is an insecure inherited permissions vulnerability that can lead to privilege escalation.
5
Is CVE-2024-25561 a part of any known exploits?
As of now, there are no public reports of active exploits specifically targeting CVE-2024-25561.