CVE-2019-18618

Katalog CVE

CVSS 6.0 · Medium EPSS 0,55%

Kerentanan pada synaptics vfs75xx firmware, lenovo thinkpad 25 firmware +39 lainnya. Skor CVSS 3.1 6.0 (Medium) menurut NVD.

Deskripsi (NVD)

Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table.

Rincian

Terbit di NVD

22 Juli 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.0 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

EPSS (30 hari)

0,55% peluang dieksploitasi; lebih tinggi dari 44,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 152 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://www.synaptics.com/company/blog/ advisory vendor
• https://www.synaptics.com/sites/default/files/fingerprint-sensor-VFS7500-security-brief-2020-07-14.pdf advisory vendor
• https://support.hp.com/us-en/document/c06696474 patch · advisory pihak ketiga
• https://support.lenovo.com/us/en/product_security/LEN-31372 patch · advisory pihak ketiga