Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2024-0454

Security Vulnerability on Match-on-Chip FPR Architecture

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ELAN

Description

ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor. This fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity. Version which is lower than 3.0.12011.08009(Legacy)/3.3.12011.08103(ESS) would suffer this risk on DELL Inspiron platform.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ELAN DELL Inspiron

Default version status: affected

  • 3.0.12011.08001 to < 3.0.12011.08009affected
  • 3.3.12011.08101 to < 3.3.12011.08103affected

References