PT-2020-4915 · Intel · Intel(R) Hid Event Filter Driver

Published 2020-11-10 · Updated 2020-11-24 · CVE-2020-12332

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Intel(R) HID Event Filter Driver versions all

Description: The issue is related to improper permissions in the installer for the Intel(R) HID Event Filter Driver. This may allow an authenticated user to potentially enable escalation of privilege via local access. The vulnerability is associated with errors in managing privileges, which could allow an attacker to elevate their privileges.

Recommendations: For all versions, consider restricting access to the installer until a fix is available. As a temporary workaround, ensure that only authorized users have local access to the system to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Preservation of Permissions

Weakness Enumeration

CWE-264

CWE-281

Related Identifiers

BDU:2020-05490

CVE-2020-12332

Affected Products

Intel(R) Hid Event Filter Driver

References · 7

• https://osv.dev/vulnerability/CVE-2020-12332 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-05490 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00421 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-12332 · Security Note
• https://t.me/cibsecurity/16253 · Telegram Post
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00421.html · Note
• https://cybersecurity-help.cz/vdb/SB2020111210 · Note