CVE-2023-6482 in Fingerprint Driver
摘要
由 MITRE • 2024-01-27
Use of encryption key derived from static information in Synaptics Fingerprint Driver allows
an attacker to set up a TLS session with the fingerprint sensor and send restricted commands to the fingerprint sensor. This may allow an attacker, who has physical access to the sensor, to enroll a fingerprint into the template database.
VulDB is the best source for vulnerability data and more expert information about this specific topic.