CVE-2024-23592

Published: Apr 5, 2024Modified: Jun 17, 2026Deferred

6.3

Vector

CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 0.4 / Impact: 5.9

Source: psirt@lenovo.com (Secondary)

Description

An authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint readers that could allow an attacker with physical access to replay fingerprints and bypass Windows Hello authentication.

Related CWEs

CWE-358

Improperly Implemented Security Check for Standard

The product does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique.

References (2)

https://support.lenovo.com/us/en/product_security/LEN-155804

Source: psirt@lenovo.com

https://support.lenovo.com/us/en/product_security/LEN-155804

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.