CVE-2019-13603

An issue was discovered in the HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader Windows Biometric Framework driver 5.0.0.5

published July 16, 2019

CVSS
—
EPSS
1%
Percentile
64.4
In the wild
Unconfirmed
What it is

An issue was discovered in the HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader Windows Biometric Framework driver 5.0.0.5. It has a statically coded initialization vector to encrypt a user's fingerprint image, resulting in weak encryption of that. This, in combination with retrieving an encrypted fingerprint image and encryption key (through another vulnerability), allows an attacker to obtain a user's fingerprint image.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01064 · 64.4th percentile
Published
2019-07-16T16:52Z
EPSS history
Timeline
  • 16 JUL 16:52Z
    An issue was discovered in the HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader Windows Biometric Framework driver 5.0.0.5
    cvelistv5