CVE-2023-6482 in Fingerprint Driverinformazioni

Riassunto

di MITRE • 27/01/2024

Use of encryption key derived from static information in Synaptics Fingerprint Driver allows

an attacker to set up a TLS session with the fingerprint sensor and send restricted commands to the fingerprint sensor. This may allow an attacker, who has physical access to the sensor, to enroll a fingerprint into the template database.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Responsabile

Synaptics, Inc.

Prenotare

04/12/2023

Divulgazione

27/01/2024

Moderazione

accettato

CPE

pronto

EPSS

0.00132

KEV

no

Attività

molto basso

Fonti

Interested in the pricing of exploits?

See the underground prices here!