Lucene search
+L

180 matches found

NVD
NVD
•added 2019/07/15 2:15 p.m.•25 views

CVE-2019-13604

There is a short key vulnerability in HID Global DigitalPersona formerly Crossmatch U.are.U 4500 Fingerprint Reader v24. The key for obfuscating the fingerprint image is vulnerable to brute-force attacks. This allows an attacker to recover the key and decrypt that image using the key. Successful...

5.9CVSS5.5AI score0.01122EPSS
SaveExploits1References3
Prion
Prion
•added 2019/07/15 2:15 p.m.•21 views

Design/Logic Flaw

There is a short key vulnerability in HID Global DigitalPersona formerly Crossmatch U.are.U 4500 Fingerprint Reader v24. The key for obfuscating the fingerprint image is vulnerable to brute-force attacks. This allows an attacker to recover the key and decrypt that image using the key. Successful...

4.3CVSS5.6AI score0.01122EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2019/07/15 1:47 p.m.•60 views

CVE-2019-13604

The CVE applies to HID Global DigitalPersona U.are.U 4500 Fingerprint Reader v24. The vulnerability is a short key used to obfuscate fingerprint images; this key is vulnerable to brute-force attacks, allowing an attacker to recover the key and decrypt the image, which leads to a biometric informa...

5.9CVSS5.5AI score0.01122EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2019/07/15 12:00 a.m.•5 views

PT-2019-13445

Name of the Vulnerable Software and Affected Versions HID Global DigitalPersona formerly Crossmatch U.are.U 4500 Fingerprint Reader version 24 Description The issue concerns a short key used for obfuscating fingerprint images, which is susceptible to brute-force attacks. An attacker can exploit...

5.9CVSS0.01122EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/15 12:00 a.m.•9 views

CVE-2019-13604: Use of a Broken or Risky Cryptographic Algorithm

There is a short key vulnerability in HID Global DigitalPersona formerly Crossmatch U.are.U 4500 Fingerprint Reader v24. The key for obfuscating the fingerprint image is vulnerable to brute-force attacks. This allows an attacker to recover the key and decrypt that image using the key. Successful...

5.9CVSS5.9AI score0.01122EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2019/06/13 11:29 p.m.•20 views

CVE-2019-12813

An issue was discovered in Digital Persona U.are.U 4500 Fingerprint Reader v24. The key and salt used for obfuscating the fingerprint image exhibit cleartext when the fingerprint scanner device transfers a fingerprint image to the driver. An attacker who sniffs an encrypted fingerprint image can...

5.9CVSS6.2AI score0.01131EPSS
SaveExploits1References3
CVE
CVE
•added 2019/06/13 10:25 p.m.•92 views

CVE-2019-12813

The CVE-2019-12813 issue affects Digital Persona U.are.U 4500 Fingerprint Reader v24. The encryption obfuscation for fingerprint images uses a key and salt that appear in cleartext when transferring the image to the driver. An attacker that can sniff a captured fingerprint image could decrypt it ...

5.9CVSS5.6AI score0.01131EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/06/13 12:00 a.m.•12 views

CVE-2019-12813: Cleartext Transmission of Sensitive Information

An issue was discovered in Digital Persona U.are.U 4500 Fingerprint Reader v24. The key and salt used for obfuscating the fingerprint image exhibit cleartext when the fingerprint scanner device transfers a fingerprint image to the driver. An attacker who sniffs an encrypted fingerprint image can...

5.9CVSS5.8AI score0.01131EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2019/06/13 12:00 a.m.•8 views

PT-2019-12963

Name of the Vulnerable Software and Affected Versions Digital Persona U.are.U 4500 Fingerprint Reader version v24 Description An issue was discovered where the key and salt used for obfuscating the fingerprint image are transmitted in cleartext when the fingerprint scanner device transfers a...

5.9CVSS0.01131EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2019/05/08 12:00 a.m.•14 views

Omron NJ501-4500 PLC Detection

Binary data 755775.prm...

7.3AI score
SaveExploits0
NVD
NVD
•added 2019/03/28 12:29 a.m.•32 views

CVE-2019-1750

A vulnerability in the Easy Virtual Switching System VSS of Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an unauthenticated, adjacent attacker to cause the switches to reload. The vulnerability is due to incomplete error handling when processing Cisco Discovery Protocol CDP...

7.4CVSS7.4AI score0.00713EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2019/03/28 12:29 a.m.•18 views

CVE-2019-1750

A vulnerability in the Easy Virtual Switching System VSS of Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an unauthenticated, adjacent attacker to cause the switches to reload. The vulnerability is due to incomplete error handling when processing Cisco Discovery Protocol CDP...

7.4CVSS7.1AI score0.00713EPSS
SaveExploits0References2
CNVD
CNVD
•added 2019/03/28 12:00 a.m.•25 views

Cisco IOS XE Catalyst 4500 Denial of Service Vulnerability

Cisco IOS XE is a modular operating system based on the Linux kernel. A denial of service vulnerability exists in the Simple Virtual Switching System VSS of the Cisco IOS XE software on Catalyst 4500 series switches, which stems from a failure to perform a complete processing error when handling...

7.4CVSS6.7AI score0.00713EPSS
SaveExploits0References1
CVE
CVE
•added 2019/03/27 11:55 p.m.•99 views

CVE-2019-1750

Cisco IOS XE Software on Catalyst 4500 Series Switches is vulnerable in the Easy Virtual Switching System (VSS) to denial of service via unauthenticated, adjacent CDP packets. The root cause is incomplete error handling when processing CDP in VSS. An attacker can send a crafted CDP packet to caus...

7.4CVSS7.4AI score0.00713EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2019/03/27 11:55 p.m.•19 views

CVE-2019-1750 Cisco IOS XE Software Catalyst 4500 Cisco Discovery Protocol Denial of Service Vulnerability

A vulnerability in the Easy Virtual Switching System VSS of Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an unauthenticated, adjacent attacker to cause the switches to reload. The vulnerability is due to incomplete error handling when processing Cisco Discovery Protocol CDP...

7.4CVSS6.9AI score0.00713EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/03/27 11:55 p.m.•56 views

CVE-2019-1750 Cisco IOS XE Software Catalyst 4500 Cisco Discovery Protocol Denial of Service Vulnerability

A vulnerability in the Easy Virtual Switching System VSS of Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an unauthenticated, adjacent attacker to cause the switches to reload. The vulnerability is due to incomplete error handling when processing Cisco Discovery Protocol CDP...

7.4CVSS7.4AI score0.00713EPSS
SaveExploits0References2
Cisco
Cisco
•added 2019/03/27 4:00 p.m.•131 views

Cisco IOS XE Software Catalyst 4500 Cisco Discovery Protocol Denial of Service Vulnerability

A vulnerability in the Easy Virtual Switching System VSS of Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an unauthenticated, adjacent attacker to cause the switches to reload. The vulnerability is due to incomplete error handling when processing Cisco Discovery Protocol CDP...

7.4CVSS1.5AI score0.00713EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/03/27 12:00 a.m.•8 views

PT-2019-15173

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software on Catalyst 4500 Series Switches affected versions not specified Description The issue is due to incomplete error handling when processing Cisco Discovery Protocol CDP packets used with the Easy Virtual Switching System. ...

7.4CVSS0.00713EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/27 12:00 a.m.•10 views

CVE-2019-1750: Improper Input Validation

A vulnerability in the Easy Virtual Switching System VSS of Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an unauthenticated, adjacent attacker to cause the switches to reload. The vulnerability is due to incomplete error handling when processing Cisco Discovery Protocol CDP...

7.4CVSS5.9AI score0.00713EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2019/03/23 12:00 a.m.•7 views

PT-2019-5808

Name of the Vulnerable Software and Affected Versions HID Global DigitalPersona U.are.U 4500 Fingerprint Reader Windows Biometric Framework driver version 5.0.0.5 Description The issue is related to errors in cryptographic transformations in the driver, which results in weak encryption of a user'...

5.9CVSS6.1AI score0.01064EPSS
SaveExploits1References8
Rows per page
Query Builder