CVE-2024-23592CWE-358

An authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint readers that could allow an attacker with physical access to…

Medium · published April 5, 2024

CVSS v3.1
6.3
EPSS
0%
Percentile
15.5
In the wild
Unconfirmed
What it is

An authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint readers that could allow an attacker with physical access to replay fingerprints and bypass Windows Hello authentication.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00250 · 15.5th percentile
Weakness
CWE-358 · Improperly Implemented Security Check for Standard
Published
2024-04-05T20:46Z
EPSS history
Timeline
  • 05 APR 20:46Z
    An authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint readers that could allow an attacker with physical access to…
    cvelistv5