{"id":"CVE-2024-2207","state":"PUBLISHED","title":"Sound Research SECOMN64 Escalation of Privilege","description":"Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. Sound Research has released driver updates to mitigate the potential vulnerabilities.","publishedAt":"2024-11-12T19:24:46.327Z","updatedAt":"2024-11-13T18:26:16.314Z","severity":{"score":6,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H","source":"hp"},"assigner":"hp","products":["Sound Research SECOMN64 Driver"],"affected":[{"vendor":"Sound Research","product":"SECOMN64 Driver","defaultStatus":"unknown","versions":[{"version":"See HP Security Bulletin reference for affected versions.","status":"affected"}]}],"references":["https://support.hp.com/us-en/document/ish_11567250-11567490-16/hpsbhf03987"],"weaknesses":["CWE-427"],"ingestedAt":"2026-10-29T20:07:21.467Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/2xxx/CVE-2024-2207.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-2207","state":"PUBLISHED","datePublished":"2024-11-12T19:24:46.327Z","dateUpdated":"2024-11-13T18:26:16.314Z","assignerShortName":"hp","assignerOrgId":"74586083-13ce-40fd-b46a-8e5d23cfbcb2","dateReserved":"2024-03-05T22:33:59.358Z"},"containers":{"cna":{"title":"Sound Research SECOMN64 Escalation of Privilege","descriptions":[{"lang":"en","value":"Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. Sound Research has released driver updates to mitigate the potential vulnerabilities."}],"affected":[{"vendor":"Sound Research","product":"SECOMN64 Driver","defaultStatus":"unknown","versions":[{"version":"See HP Security Bulletin reference for affected versions.","status":"affected"}]}],"references":[{"url":"https://support.hp.com/us-en/document/ish_11567250-11567490-16/hpsbhf03987"}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-427","description":"CWE-427 Uncontrolled Search Path Element","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"hp","orgId":"74586083-13ce-40fd-b46a-8e5d23cfbcb2","dateUpdated":"2024-11-12T19:24:46.327Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"hewlett_packard_enterprise","product":"sound_research_secomn64_driver","defaultStatus":"unknown","versions":[{"version":"1","status":"affected"}],"cpes":["cpe:2.3:a:hewlett_packard_enterprise:sound_research_secomn64_driver:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-11-13T18:24:18.622087Z","id":"CVE-2024-2207","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-11-13T18:26:16.314Z"}}]}}}