VulnerabilityDeferred
CVE-2024-23592
An authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint readers that could allow an attacker with physical access to replay fingerprints and bypass Windows Hello authentication.
MEDIUM 6.3EPSS 0.25%
Does this matter?
Lower severity and a low EPSS score (0.25%). Track it; it rarely justifies an emergency change on its own.
Description
An authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint readers that could allow an attacker with physical access to replay fingerprints and bypass Windows Hello authentication.
- CVSS 3.1
- 6.3 MEDIUMCVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 0.25% probability · 16th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-358
- Source
- psirt@lenovo.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.