Incorrect default permissions in Intel products - CVE-2024-23974

Vulnerability identifier: #VU96063

CSH Severity: Low

CVSS v4: 5.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-23974

CWE-ID: CWE-276

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to incorrect default permissions. A local user can gain elevated privileges on the target system.

Intel Integrated Sensor Hub software for 11th Generation Intel Core Processor Family
Intel Integrated Sensor Hub software for Intel NUC M15 Laptop Kit LAPBC710
Intel Integrated Sensor Hub software for Intel NUC M15 Laptop Kit LAPBC510
Intel Integrated Sensor Hub software for 12th Generation Intel Core Processor Family
Intel Integrated Sensor Hub software for Intel NUC M15 Laptop Kit LAPRC710
Intel Integrated Sensor Hub software for Intel NUC M15 Laptop Kit LAPRC510
Yoga 9 2-in-1 14IMH9
Lenovo Slim 7 14IMH9
Lenovo Slim 7 14IRP8
Lenovo Slim 7 Carbon 13IRP8
Lenovo Slim Pro 9 14IRP8
Lenovo Slim Pro 9 16IRP8
Lenovo V14 G4 IAN
Lenovo V15 G4 IAN
ThinkBook 14 2-in-1 G4 IML
ThinkBook 16p G4 IRH
ThinkBook Plus G4 IRU
Yoga 7 14IRL8
Yoga 7 16IRL8
Yoga 7 2-in-1 14IML9
Yoga 7 2-in-1 16IML9
Yoga 9 14IRP8
Lenovo Flex 7 14IRU8
Yoga Book 9 13IMU9
Yoga Pro 7 14IMH9
Yoga Pro 7 14IRH8
Yoga Pro 9 14IRP8
Yoga Pro 9 16IRP8
Yoga Slim 6 14IAP8
Yoga Slim 6 14IRH8
Yoga Slim 6 14IRP8
Yoga Slim 7 14IMH9
Yoga Slim 7 Carbon 13IRP8
ThinkPad T14s Gen 2 20WM
ThinkPad T14s Gen 2 20WN
ThinkPad X13 Gen 2 20WK
ThinkPad X13 Gen 2 20WL
IdeaPad Slim 3 14IAN8
Lenovo 100w Gen 4
Lenovo 300w Yoga Gen 4
Lenovo 500w Yoga Gen 4
IdeaPad 5 2-in-1 14IRU9
IdeaPad 5 2-in-1 16IRU9
IdeaPad Duet 3 11IAN8
IdeaPad Duet 5 12IRU8
IdeaPad Flex 5 14IRU8
IdeaPad Flex 5 16IRU8
IdeaPad Pro 5 14IMH9
IdeaPad Pro 5 14IRH8
IdeaPad Pro 5 16IMH9
IdeaPad Pro 5 16IRH8
IdeaPad Slim 3 14IAH8
IdeaPad Slim 3 14IRH8
IdeaPad Slim 3 14IRU8
IdeaPad Slim 3 14IRU9
IdeaPad Slim 3 15IAH8
IdeaPad Slim 3 15IAN8
IdeaPad Slim 3 15IRH8
IdeaPad Slim 3 15IRU8
IdeaPad Slim 3 15IRU9
IdeaPad Slim 3 16IAH8
IdeaPad Slim 3 16IRH8
IdeaPad Slim 3 16IRU8
IdeaPad Slim 3 16IRU9
IdeaPad Slim 5 15IRH9
IdeaPad Slim 5 15IRU9
Intel Integrated Sensor Solution for Windows 11 (Version 21H2 or later), 10 (Version 1909 or later) - ThinkPad T14s Gen 2, X13 Gen 2
Intel Integrated Sensor Solution Driver for Windows 11 (64-bit) - IdeaPad Flex 5 16IRU8, IdeaPad Flex 5 14IRU8, Lenovo Flex 7 14IRU8
Intel Integrated Sensor Solution Driver for Windows 11 (64-bit) - Yoga Slim 6 14IAP8
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - Yoga Pro 9 16IRP8, Lenovo Slim Pro 9 16IRP8
Intel Integrated Sensor Solution for Windows 11 (64-bit) - IdeaPad Slim 5 15IRH9, IdeaPad Slim 5 15IRU9
Inte Integrated Sensor Hub Driver for Windows 11 (64-bit) - Yoga Slim 6 14IRP8, Lenovo Slim 7 14IRP8
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - Yoga Pro 7 14IRH8
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - IdeaPad 5 2-in-1 14IRU9, IdeaPad 5 2-in-1 16IRU9
Intel Integrated Sensor Solution Driver for Windows 11 (64-bit) - Yoga Slim 7 Carbon 13IRP8, Lenovo Slim 7 Carbon 13IRP8
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - Yoga Slim 6 14IRH8
Intel Integrated Sensor Solution Driver for Windows 11 (64-bit) - Yoga 9 14IRP8
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - Yoga 7 14IRL8, Yoga 7 16IRL8
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - ThinkBook Plus G4 IRU
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - ThinkBook 16p G4 IRH
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - Yoga Pro 9 14IRP8, Lenovo Slim Pro 9 14IRP8
Intel Integrated Sensor Solution for Windows 11 (Version 22H2 or later) - Lenovo 100w Gen 4, 300w Yoga Gen 4, 500w Yoga Gen 4
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - IdeaPad Slim 3 14IRU9, IdeaPad Slim 3 15IRU9, IdeaPad Slim 3 16IRU9
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - V14 G4 IAN, V15 G4 IAN, IdeaPad Slim 3 14IAN8,IdeaPad Slim 3 15IAN8
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - IdeaPad Slim 3 Series
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - IdeaPad Pro 5 16IRH8
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - IdeaPad Pro 5 14IRH8
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - IdeaPad Pro 5 16IMH9
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - Yoga 7 2-in-1 14IML9, Yoga 7 2-in-1 16IML9
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - Yoga Book 9 13IMU9
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - IdeaPad Pro 5 14IMH9
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - IdeaPad Duet 5 12IRU8
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - IdeaPad Duet 3 11IAN8
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - Lenovo Slim 7 14IMH9, Yoga Slim 7 14IMH9
Intel Integrated Sensor Solution Driver for Windows 11 (64-bit) - ThinkBook 14 2-in-1 G4 IML
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - Yoga 9 2-in-1 14IMH9
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - Yoga Pro 7 14IMH9
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - Yoga Slim 7 14IMH9

Install updates from vendor's website.

Intel Integrated Sensor Hub software for 11th Generation Intel Core Processor Family - update to 5.4.1.4479
Intel Integrated Sensor Hub software for Intel NUC M15 Laptop Kit LAPBC710 - update to 5.4.1.4479
Intel Integrated Sensor Hub software for Intel NUC M15 Laptop Kit LAPBC510 - update to 5.4.1.4479
Intel Integrated Sensor Hub software for 12th Generation Intel Core Processor Family - update to 5.4.2.4594
Intel Integrated Sensor Hub software for Intel NUC M15 Laptop Kit LAPRC710 - update to 5.4.2.4594
Intel Integrated Sensor Hub software for Intel NUC M15 Laptop Kit LAPRC510 - update to 5.4.2.4594
Intel Integrated Sensor Solution Driver for Windows 11 (64-bit) - IdeaPad Flex 5 16IRU8, IdeaPad Flex 5 14IRU8, Lenovo Flex 7 14IRU8 - update to DEVICEMANAGER_3.1.0.4596_PACKAGE_5.4.2.4595
Intel Integrated Sensor Solution Driver for Windows 11 (64-bit) - Yoga Slim 6 14IAP8 - update to DRIVER_3.1.0.4596-PACKAGE_5.4.2.4595
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - Yoga Pro 9 16IRP8, Lenovo Slim Pro 9 16IRP8 - update to DRIVER_3.1.0.4596-PACKAGE_5.4.2.4595
Intel Integrated Sensor Solution for Windows 11 (64-bit) - IdeaPad Slim 5 15IRH9, IdeaPad Slim 5 15IRU9 - update to DRIVER_3.1.0.4596-PACKAGE_5.4.2.4595
Inte Integrated Sensor Hub Driver for Windows 11 (64-bit) - Yoga Slim 6 14IRP8, Lenovo Slim 7 14IRP8 - update to DRIVER_3.1.0.4596-PACKAGE_5.4.2.4595
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - Yoga Pro 7 14IRH8 - update to 3.1.0.4589
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - IdeaPad 5 2-in-1 14IRU9, IdeaPad 5 2-in-1 16IRU9 - update to 3.1.0.4594
Intel Integrated Sensor Solution Driver for Windows 11 (64-bit) - Yoga Slim 7 Carbon 13IRP8, Lenovo Slim 7 Carbon 13IRP8 - update to 3.1.0.4596
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - Yoga Slim 6 14IRH8 - update to 3.1.0.4596
Intel Integrated Sensor Solution Driver for Windows 11 (64-bit) - Yoga 9 14IRP8 - update to 3.1.0.4596
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - Yoga 7 14IRL8, Yoga 7 16IRL8 - update to 3.1.0.4596
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - ThinkBook Plus G4 IRU - update to 3.1.0.4596
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - ThinkBook 16p G4 IRH - update to 3.1.0.4596
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - Yoga Pro 9 14IRP8, Lenovo Slim Pro 9 14IRP8 - update to 3.1.0.4596
Intel Integrated Sensor Solution for Windows 11 (Version 22H2 or later) - Lenovo 100w Gen 4, 300w Yoga Gen 4, 500w Yoga Gen 4 - update to 3.1.0.4596
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - IdeaPad Slim 3 14IRU9, IdeaPad Slim 3 15IRU9, IdeaPad Slim 3 16IRU9 - update to 3.1.0.4596
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - V14 G4 IAN, V15 G4 IAN, IdeaPad Slim 3 14IAN8,IdeaPad Slim 3 15IAN8 - update to 3.1.0.4596
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - IdeaPad Slim 3 Series - update to 3.1.0.4596
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - IdeaPad Pro 5 16IRH8 - update to 3.1.0.4596
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - IdeaPad Pro 5 14IRH8 - update to 3.1.0.4596
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - IdeaPad Pro 5 16IMH9 - update to 3.1.0.7676
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - Yoga 7 2-in-1 14IML9, Yoga 7 2-in-1 16IML9 - update to 3.1.0.7676
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - Yoga Book 9 13IMU9 - update to 3.1.0.7676
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - IdeaPad Pro 5 14IMH9 - update to 3.1.0.7676
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - IdeaPad Duet 5 12IRU8 - update to 5.4.2.4594
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - IdeaPad Duet 3 11IAN8 - update to 5.4.2.4594
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - Lenovo Slim 7 14IMH9, Yoga Slim 7 14IMH9 - update to 5.8.0.4
Intel Integrated Sensor Solution Driver for Windows 11 (64-bit) - ThinkBook 14 2-in-1 G4 IML - update to 5.8.0.4
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - Yoga 9 2-in-1 14IMH9 - update to 5.8.0.4
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - Yoga Pro 7 14IMH9 - update to 5.8.0.4
Intel Integrated Sensor Hub Driver for Windows 11 (64-bit) - Yoga Slim 7 14IMH9 - update to 5.8.0.4

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01088.html

• Incorrect default permissions in Intel ISH Software
• Lenovo update for Intel ISH Software Installer