CVE-2023-6482 in Fingerprint Driverinfo

Zusammenfassung

von MITRE • 27.01.2024

Use of encryption key derived from static information in Synaptics Fingerprint Driver allows

an attacker to set up a TLS session with the fingerprint sensor and send restricted commands to the fingerprint sensor. This may allow an attacker, who has physical access to the sensor, to enroll a fingerprint into the template database.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Zuständig

Synaptics, Inc.

Reservieren

04.12.2023

Veröffentlichung

27.01.2024

Moderieren

akzeptiert

Eintrag

VDB-252228

CPE

bereit

EPSS

0.00132

KEV

nein

Aktivitäten

very low

Quellen

Might our Artificial Intelligence support you?

Check our Alexa App!