CVE-2024-0454
Security Vulnerability on Match-on-Chip FPR Architecture
Vexday Risk Score
13Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 6EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
12 jan 2024Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor.
This fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity.
Version which is lower than 3.0.12011.08009(Legacy)/3.3.12011.08103(ESS) would suffer this risk on DELL Inspiron platform.
CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L
Produtos afetados
ELAN · DELL InspironQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →