Lucene search
+L

1507 matches found

NVD
NVD
added 2024/01/27 1:15 a.m.28 views

CVE-2023-6482

Use of encryption key derived from static information in Synaptics Fingerprint Driver allows an attacker to set up a TLS session with the fingerprint sensor and send restricted commands to the fingerprint sensor. This may allow an attacker, who has physical access to the sensor, to enroll a...

5.2CVSS5.1AI score0.00132EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/27 1:15 a.m.9 views

CVE-2023-6482

Use of encryption key derived from static information in Synaptics Fingerprint Driver allows an attacker to set up a TLS session with the fingerprint sensor and send restricted commands to the fingerprint sensor. This may allow an attacker, who has physical access to the sensor, to enroll a...

5.2CVSS5.8AI score0.00132EPSS
SaveExploits0References1
Prion
Prion
added 2024/01/27 1:15 a.m.25 views

Design/Logic Flaw

Use of encryption key derived from static information in Synaptics Fingerprint Driver allows an attacker to set up a TLS session with the fingerprint sensor and send restricted commands to the fingerprint sensor. This may allow an attacker, who has physical access to the sensor, to enroll a...

3.6CVSS6.8AI score0.00132EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/01/27 12:19 a.m.40 views

CVE-2023-6482 Encryption key derived from static host information

Use of encryption key derived from static information in Synaptics Fingerprint Driver allows an attacker to set up a TLS session with the fingerprint sensor and send restricted commands to the fingerprint sensor. This may allow an attacker, who has physical access to the sensor, to enroll a...

5.2CVSS5.4AI score0.00132EPSS
SaveExploits0References1
CVE
CVE
added 2024/01/27 12:19 a.m.96 views

CVE-2023-6482

CVE-2023-6482 affects Synaptics Fingerprint Driver. The root cause is use of an encryption key derived from static host information, enabling an attacker with physical access to set up a TLS session with the fingerprint sensor and issue restricted commands, potentially enrolling a fingerprint int...

5.2CVSS5.1AI score0.00132EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/27 12:19 a.m.14 views

CVE-2023-6482 Encryption key derived from static host information

Use of encryption key derived from static information in Synaptics Fingerprint Driver allows an attacker to set up a TLS session with the fingerprint sensor and send restricted commands to the fingerprint sensor. This may allow an attacker, who has physical access to the sensor, to enroll a...

5.2CVSS6.8AI score0.00132EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/01/27 12:00 a.m.11 views

Synaptics Fingerprint Driver Security Vulnerability

Synaptics Fingerprint Driver is a regional touch and swipe fingerprint driver from Synaptics, Inc. A security vulnerability exists in Synaptics Fingerprint Driver. An attacker exploited the vulnerability to enroll a fingerprint into a template database...

5.2CVSS6.7AI score0.00132EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/01/26 12:00 a.m.12 views

PT-2024-14964 · Synaptics · Synaptics Fingerprint Driver

Name of the Vulnerable Software and Affected Versions: Synaptics Fingerprint Driver affected versions not specified Description: The issue allows an attacker to set up a TLS session with the fingerprint sensor and send restricted commands to it by using an encryption key derived from static...

5.2CVSS5AI score0.00132EPSS
SaveExploits0References6
OSV
OSV
added 2024/01/23 1:15 a.m.2 views

DEBIAN-CVE-2024-23206

An access issue was addressed with improved access restrictions. This issue is fixed in Safari 17.3, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A maliciously crafted webpage may be able to fingerprint the user...

6.5CVSS6.8AI score0.00921EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/01/22 12:00 a.m.9 views

Apple tvOS Security Breach

Apple tvOS is a smart TV operating system from Apple. A security vulnerability exists in Apple tvOS version 17.3, which originates from a maliciously crafted web page that may be able to capture a user's fingerprint...

6.5CVSS6.5AI score0.00921EPSS
SaveExploits0References9
Wolfi
Wolfi
added 2024/01/12 11:15 a.m.155 views

CVE-2023-49569 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, nuclei, gitness, scorecard, go-licenses, goreleaser, bom, gitsign, src-fingerprint...

9.8CVSS6.7AI score0.0151EPSS
SaveExploits0
Chainguard
Chainguard
added 2024/01/12 11:15 a.m.105 views

CVE-2023-49569 vulnerabilities

Vulnerabilities for packages: nuclei, src-fingerprint, go-licenses, goreleaser, scorecard, pulumi-kubernetes-operator, gitsign, gitness, bom...

9.8CVSS6.7AI score0.0151EPSS
SaveExploits0
OSV
OSV
added 2024/01/11 9:15 p.m.12 views

CVE-2023-50124

Flient Smart Door Lock v1.0 is vulnerable to Use of Default Credentials. Due to default credentials on a debug interface, in combination with certain design choices, an attacker can unlock the Flient Smart Door Lock by replacing the fingerprint that is stored on the scanner...

6.8CVSS5.8AI score0.0035EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2024/01/11 9:15 p.m.7 views

CVE-2023-50124

Flient Smart Door Lock v1.0 is vulnerable to Use of Default Credentials. Due to default credentials on a debug interface, in combination with certain design choices, an attacker can unlock the Flient Smart Door Lock by replacing the fingerprint that is stored on the scanner...

6.8CVSS6.7AI score0.0035EPSS
SaveExploits1References2
NVD
NVD
added 2024/01/11 9:15 p.m.40 views

CVE-2023-50124

Flient Smart Door Lock v1.0 is vulnerable to Use of Default Credentials. Due to default credentials on a debug interface, in combination with certain design choices, an attacker can unlock the Flient Smart Door Lock by replacing the fingerprint that is stored on the scanner...

6.8CVSS6.6AI score0.0035EPSS
SaveExploits1References1
Prion
Prion
added 2024/01/11 9:15 p.m.28 views

Design/Logic Flaw

Flient Smart Door Lock v1.0 is vulnerable to Use of Default Credentials. Due to default credentials on a debug interface, in combination with certain design choices, an attacker can unlock the Flient Smart Door Lock by replacing the fingerprint that is stored on the scanner...

4.6CVSS6.9AI score0.0035EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2024/01/11 12:00 a.m.45 views

CVE-2023-50124

Flient Smart Door Lock v1.0 is vulnerable to Use of Default Credentials. Due to default credentials on a debug interface, in combination with certain design choices, an attacker can unlock the Flient Smart Door Lock by replacing the fingerprint that is stored on the scanner...

6.8AI score0.0035EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/01/11 12:00 a.m.14 views

PT-2024-13863 · Flient · Flient Smart Door Lock

Name of the Vulnerable Software and Affected Versions: Flient Smart Door Lock version 1.0 Description: The issue is related to the use of default credentials on a debug interface, combined with certain design choices, allowing an attacker to unlock the Flient Smart Door Lock by replacing the...

6.8CVSS6.7AI score0.0035EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2024/01/11 12:00 a.m.15 views

CVE-2023-50124

Flient Smart Door Lock v1.0 is vulnerable to Use of Default Credentials. Due to default credentials on a debug interface, in combination with certain design choices, an attacker can unlock the Flient Smart Door Lock by replacing the fingerprint that is stored on the scanner...

6.8AI score0.0035EPSS
SaveExploits1References1
Chainguard
Chainguard
added 2024/01/10 3:37 p.m.48 views

GHSA-449P-3H89-PW88 vulnerabilities

Vulnerabilities for packages: nuclei, src-fingerprint, go-licenses, goreleaser, scorecard, pulumi-kubernetes-operator, gitsign, gitness, bom...

5.9AI score
SaveExploits0
Rows per page
Query Builder