CVE-2024-2207
Last modified
CVE-2024-2207 is a medium-severity vulnerability rated 6/10 on the CVSS scale. Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. Sound Research has released driver updates to mitigate the potential vulnerabilities.. EPSS estimates a 0.14% chance of exploitation in the next 30 days.
Description
Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. Sound Research has released driver updates to mitigate the potential vulnerabilities.
Metrics
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-2207?
How severe is CVE-2024-2207?
How do I fix CVE-2024-2207?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-22064ZTE ZXUN-ePDG product, which serves as the network node of t…6.5
- CVE-2024-22065There is a command injection vulnerability in ZTE MF258 Pro …8.8
- CVE-2024-22066There is a privilege escalation vulnerability in ZTE ZXR10 Z…6.5
- CVE-2024-22067ZTE NH8091 product has an improper permission control vulner…8.8
- CVE-2024-22068Improper Privilege Management vulnerability in ZTE ZXR10 180…6.5
- CVE-2024-22069There is a permission and access control vulnerability of ZT…8.8
- CVE-2024-22074Dynamsoft Service 1.8.1025 through 1.8.2013, 1.7.0330 throug…9.8
- CVE-2024-22075Firefly III (aka firefly-iii) before 6.1.1 allows webhooks H…6.1
- CVE-2024-22076MyQ Print Server before 8.2 patch 43 allows remote authentic…9.8
- CVE-2024-22077An issue was discovered in Elspec G5 digital fault recorder …5.3
- CVE-2024-22078An issue was discovered in Elspec G5 digital fault recorder …8.8
- CVE-2024-22079An issue was discovered in Elspec G5 digital fault recorder …7.5
Are you affected by CVE-2024-2207?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST