Lucene search
+L

214 matches found

Lenovo
Lenovo
added 2024/03/12 4:32 p.m.13 views

Fingerprint Reader Vulnerabilities - Lenovo Support US

No description provided...

7.3AI score
SaveExploits0
OSV
OSV
added 2024/01/12 2:15 a.m.5 views

CVE-2024-0454

ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor. This fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity. Version which is lower than...

6.1CVSS5.7AI score0.00253EPSS
SaveExploits0References2
NVD
NVD
added 2024/01/12 2:15 a.m.32 views

CVE-2024-0454

ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor. This fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity. Version which is lower than...

6.1CVSS6.1AI score0.00253EPSS
SaveExploits0References2
Prion
Prion
added 2024/01/12 2:15 a.m.20 views

Design/Logic Flaw

ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor. This fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity. Version which is lower than...

3.6CVSS7.1AI score0.00253EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2024/01/12 1:48 a.m.65 views

CVE-2024-0454

The CVE-2024-0454 issue affects Dell EMC ELAN Match-on-Chip FPR solutions, where a design fault can cause valid SID leakage and enumeration with a spoof sensor, enabling bypass of Windows Hello by cloning the SID to break account identity on the Dell Inspiron platform. Documented affected version...

6.1CVSS6.2AI score0.00253EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/01/12 1:48 a.m.64 views

CVE-2024-0454 Security Vulnerability on Match-on-Chip FPR Architecture

ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor. This fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity. Version which is lower than...

6CVSS6.5AI score0.00253EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/01/12 1:48 a.m.10 views

CVE-2024-0454 Security Vulnerability on Match-on-Chip FPR Architecture

ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor. This fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity. Version which is lower than...

6CVSS6.9AI score0.00253EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/01/12 12:00 a.m.8 views

Dell EMC ELAN Match-on-Chip FPR solution Security Vulnerability

The Dell EMC ELAN Match-on-Chip FPR solution is an on-chip match-on-chip FPR solution from Dell USA. A security vulnerability exists in previous versions of the Dell EMC ELAN Match-on-Chip FPR solution 3.0.12011.08009 Legacy/3.3.12011.08103 ESS, which stems from a SID leakage vulnerability that c...

6.1CVSS6.7AI score0.00253EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/01/12 12:00 a.m.16 views

PT-2024-15573 · Microsoft +1 · Windows Shell +1

Name of the Vulnerable Software and Affected Versions: ELAN Match-on-Chip FPR solution versions prior to 3.0.12011.08009 Legacy ELAN Match-on-Chip FPR solution versions prior to 3.3.12011.08103 ESS Description: The ELAN Match-on-Chip FPR solution has a design fault that poses a potential risk of...

6.1CVSS6.2AI score0.00253EPSS
SaveExploits0References5
NVD
NVD
added 2023/12/09 10:15 p.m.43 views

CVE-2023-50430

The Goodix Fingerprint Device, as shipped in Dell Inspiron 15 computers, does not follow the Secure Device Connection Protocol SDCP when enrolling via Linux, and accepts an unauthenticated configuration packet to select the Windows template database, which allows bypass of Windows Hello...

6.4CVSS0.00412EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/12/09 10:15 p.m.4 views

CVE-2023-50430

The Goodix Fingerprint Device, as shipped in Dell Inspiron 15 computers, does not follow the Secure Device Connection Protocol SDCP when enrolling via Linux, and accepts an unauthenticated configuration packet to select the Windows template database, which allows bypass of Windows Hello...

6.4CVSS6.6AI score0.00412EPSS
SaveExploits1References2
Prion
Prion
added 2023/12/09 10:15 p.m.23 views

Authentication flaw

The Goodix Fingerprint Device, as shipped in Dell Inspiron 15 computers, does not follow the Secure Device Connection Protocol SDCP when enrolling via Linux, and accepts an unauthenticated configuration packet to select the Windows template database, which allows bypass of Windows Hello...

3.7CVSS7.5AI score0.00412EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2023/12/09 12:00 a.m.44 views

CVE-2023-50430

The Goodix Fingerprint Device, as shipped in Dell Inspiron 15 computers, does not follow the Secure Device Connection Protocol SDCP when enrolling via Linux, and accepts an unauthenticated configuration packet to select the Windows template database, which allows bypass of Windows Hello...

6.8AI score0.00412EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/12/09 12:00 a.m.8 views

Dell Inspiron Security Breach

The Dell Inspiron is a line of laptop computers from Dell Inc. in the United States. The Dell Inspiron 15 suffers from a security vulnerability that stems from the Goodix fingerprinting device shipped with the computer not following the Secure Device Connection Protocol SDCP when enrolling via...

6.4CVSS6.9AI score0.00412EPSS
SaveExploits1References2
CVE
CVE
added 2023/12/09 12:00 a.m.52 views

CVE-2023-50430

The CVE-2023-50430 entry describes a vulnerability in the Goodix fingerprint device shipped with Dell Inspiron 15 laptops. The issue is that the device does not follow the Secure Device Connection Protocol (SDCP) during Linux enrollment and accepts an unauthenticated configuration packet to selec...

6.4CVSS6.6AI score0.00412EPSS
SaveExploits1References1Affected Software1
Malwarebytes
Malwarebytes
added 2023/11/24 7:36 p.m.37 views

Windows Hello fingerprint authentication can be bypassed on popular laptops

Researchers have found several weaknesses in Windows Hello fingerprint authentication on Dell Inspiron 15, Lenovo ThinkPad T14, and Microsoft Surface Pro X laptops. Microsoft’s Offensive Research and Security Engineering MORSE asked the researchers to evaluate the security of the top three...

7.7AI score
SaveExploits0
The Hacker News
The Hacker News
added 2023/11/22 3:23 p.m.99 views

New Flaws in Fingerprint Sensors Let Attackers Bypass Windows Hello Login

A new research has uncovered multiple vulnerabilities that could be exploited to bypass Windows Hello authentication on Dell Inspiron 15, Lenovo ThinkPad T14, and Microsoft Surface Pro X laptops. The flaws were discovered by researchers at hardware and software product security and offensive...

6.1CVSS7AI score0.00807EPSS
SaveExploits0
The Hacker News
The Hacker News
added 2023/09/26 5:04 p.m.47 views

Microsoft is Rolling out Support for Passkeys in Windows 11

Microsoft is officially rolling out support for passkeys in Windows 11 today as part of a major update to the desktop operating system. The feature allows users to login to websites and applications without having to provide a username and password, instead relying on their device PIN or biometri...

6.7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/06/19 12:00 a.m.10 views

The vulnerability of the biometric authentication function of Windows Hello on Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a perpetrator to execute arbitrary code using a specially created file...

7.8CVSS7.8AI score0.00719EPSS
SaveExploits0References3
OSV
OSV
added 2023/06/14 12:15 a.m.4 views

CVE-2023-32018

Windows Hello Remote Code Execution Vulnerability...

7.8CVSS7.4AI score0.00719EPSS
SaveExploits0References1
Rows per page
Query Builder