CVE-2024-23592
- State
- Published
- Severity
- 6.3 Medium
- Published
- Apr 5, 2024
- Updated
- Sep 6, 2024
- Reserved
- Jan 18, 2024
Description
An authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint readers that could allow an attacker with physical access to replay fingerprints and bypass Windows Hello authentication.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.3 Medium | CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H | lenovo |
Weaknesses
- CWE-358 Improperly Implemented Security Check for Standard
Affected Products
| Product | Versions |
|---|---|
Synaptics Fingerprint ReadersLenovo |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.