Login Request a demo
Medium severity · published Nov 12, 2024
CVE-2024-2207
Sound Research SECOMN64 Escalation of Privilege
6.0
CVSS
0.1%
EPSS
No
On KEV
Description
Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. Sound Research has released driver updates to mitigate the potential vulnerabilities.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
High
User interaction
None
Confidentiality
Low
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 3% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SD
SECOMN64 Driver · Sound Research
See HP Security Bulletin reference for affected versions. · source: vendor
SR
Sound Research Secomn64 Driver · Hewlett Packard Enterprise
1 · source: CISA
Affected product
SD
SECOMN64 Driver
Sound Research
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-2207
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-2207
support.hp.com
https://support.hp.com/us-en/document/ish_11567250-11567490-16/hpsbhf03987
More from SECOMN64 Driver
8.8
CVE-2024-2208
Sound Research SECOMN64 Escalation of Privilege