CVE-2024-0454

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor. This fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity. Version which is lower than 3.0.12011.08009(Legacy)/3.3.12011.08103(ESS) would suffer this risk on DELL Inspiron platform.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-290

Affected software

No affected versions have been published.

Timeline

Published
Jan 12, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-04557.5The inclusion of the web scraper for AnythingLLM means that any user with the proper authorization level (manager, admin, and when in singleCVE-2024-04564.3An authorization vulnerability exists in GitLab versions 14.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. An unauthorizCVE-2024-04597.2A vulnerability has been found in Blood Bank & Donor Management 5.6 and classified as critical. This vulnerability affects unknown code of tCVE-2024-04609.8A vulnerability was found in code-projects Faculty Management System 1.0 and classified as critical. This issue affects some unknown processCVE-2024-04619.8A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been classified as critical. Affected is an unknown functionCVE-2024-04629.8A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been declared as critical. Affected by this vulnerability isCVE-2024-04639.8A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been rated as critical. Affected by this issue is some unknoCVE-2024-04649.8A vulnerability classified as critical has been found in code-projects Online Faculty Clearance 1.0. This affects an unknown part of the filCVE-2024-04655.3A vulnerability classified as problematic was found in code-projects Employee Profile Management System 1.0. This vulnerability affects unknCVE-2024-04669.8A vulnerability, which was classified as critical, has been found in code-projects Employee Profile Management System 1.0. This issue affectCVE-2024-04676.1A vulnerability, which was classified as problematic, was found in code-projects Employee Profile Management System 1.0. Affected is an unknCVE-2024-04689.8A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affected by this vulnerabil