CVE-2023-6482

Summary

CVE-2023-6482 is a vulnerability affecting Synaptics Fingerprint Driver. The issue involves the use of a static encryption key, which can be exploited by an attacker with physical access to the sensor. By setting up a TLS session with the fingerprint sensor, the attacker can send restricted commands, potentially leading to unauthorized fingerprint enrollment in the template database. This could compromise the security of biometric authentication systems relying on this driver.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.