CVE-2023-6482 in Fingerprint Driverالمعلومات

الملخص

بحسب MITRE • 27/01/2024

Use of encryption key derived from static information in Synaptics Fingerprint Driver allows

an attacker to set up a TLS session with the fingerprint sensor and send restricted commands to the fingerprint sensor. This may allow an attacker, who has physical access to the sensor, to enroll a fingerprint into the template database.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

مسؤول

Synaptics, Inc.

حجز

04/12/2023

إفشاء

27/01/2024

الاعتدال

تمت الموافقة

إدخال

VDB-252228

EPSS

0.00132

KEV

لا

النشاطات

منخفض جدًا

المصادر

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!