Security Advisory

CVE-2019-13604

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-07-15 13:47:12

Last updated 2024-08-04 23:57:39

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

There is a short key vulnerability in HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader v24. The key for obfuscating the fingerprint image is vulnerable to brute-force attacks. This allows an attacker to recover the key and decrypt that image using the key. Successful exploitation causes a sensitive biometric information leak.

← Browse all CVEs View on cve.org ↗