CVE-2024-0454: Security Vulnerability on Match-on-Chip FPR Architecture
ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor. This fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity. Version which is lower than 3.0.12011.08009(Legacy)/3.3.12011.08103(ESS) would suffer this risk on DELL Inspiron platform.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0454?
CVE-2024-0454 is considered a high-severity vulnerability due to its potential to bypass Windows Hello recognition.
How do I fix CVE-2024-0454?
To fix CVE-2024-0454, you should update to firmware version 3.0.12011.08 or later.
What systems are affected by CVE-2024-0454?
CVE-2024-0454 affects versions of the EMC Elan Match-on-Chip FPR Solution firmware lower than 3.0.12011.08.
What does CVE-2024-0454 exploit?
CVE-2024-0454 exploits a design flaw that can lead to valid SID leakage and spoof sensor enumeration.
What are the consequences of CVE-2024-0454?
The consequences of CVE-2024-0454 include the risk of cloned SIDs which can break account identity and security.