VulnerabilityDeferred

CVE-2024-2207

Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege.

MEDIUM 6.0EPSS 0.14%

Does this matter?

Lower severity and a low EPSS score (0.14%). Track it; it rarely justifies an emergency change on its own.

Description

Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. Sound Research has released driver updates to mitigate the potential vulnerabilities.

CVSS 3.1: 6.0 MEDIUMCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H
EPSS: 0.14% probability · 3th percentile
CISA KEV: Not listed
Weakness: CWE-427
Source: hp-security-alert@hp.com

References

https://support.hp.com/us-en/document/ish_11567250-11567490-16/hpsbhf03987

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.