CVE-2024-0454: Security Vulnerability on Match-on-Chip FPR Architecture
First published: Fri Jan 12 2024(Updated: )
ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor. This fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity. Version which is lower than 3.0.12011.08009(Legacy)/3.3.12011.08103(ESS) would suffer this risk on DELL Inspiron platform.
Credit: 36106deb-8e95-420b-a0a0-e70af5d245df
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Any of | ||
| Emc Elan Match-on-chip Fpr Solution Firmware | =3.0.12011.08009 | |
| Emc Elan Match-on-chip Fpr Solution Firmware | =3.3.12011.08103 | |
| EMC Elan Match-on-Chip FPR Solution |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-0454?
CVE-2024-0454 is considered a high-severity vulnerability due to its potential to bypass Windows Hello recognition.
How do I fix CVE-2024-0454?
To fix CVE-2024-0454, you should update to firmware version 3.0.12011.08 or later.
What systems are affected by CVE-2024-0454?
CVE-2024-0454 affects versions of the EMC Elan Match-on-Chip FPR Solution firmware lower than 3.0.12011.08.
What does CVE-2024-0454 exploit?
CVE-2024-0454 exploits a design flaw that can lead to valid SID leakage and spoof sensor enumeration.
What are the consequences of CVE-2024-0454?
The consequences of CVE-2024-0454 include the risk of cloned SIDs which can break account identity and security.
- agent/weakness
- agent/title
- agent/author
- agent/type
- agent/first-publish-date
- agent/description
- agent/severity
- agent/references
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/tags
- agent/softwarecombine
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- vendor/emc
- canonical/emc elan match-on-chip fpr solution firmware
- version/emc elan match-on-chip fpr solution firmware/3.0.12011.08009
- version/emc elan match-on-chip fpr solution firmware/3.3.12011.08103
- canonical/emc elan match-on-chip fpr solution