CVEvulnerability

CVE-2024-23592

6.3 MEDIUM Published 2024-04-05 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2024-04-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.3 MEDIUM — CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-358

Description

An authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint readers that could allow an attacker with physical access to replay fingerprints and bypass Windows Hello authentication.

Related

Weakness · CWE (1)

  • CWE-358 Improperly Implemented Security Check for Standard weakness

References