digital_persona_u.are.u_4500_driver_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/digital_persona_u-are-u_4500_driver_firmware/ Sun, 26 Feb 2023 06:30:18 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png digital_persona_u.are.u_4500_driver_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/digital_persona_u-are-u_4500_driver_firmware/ 32 32 CVE-2019-13603 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-13603/ Sun, 26 Feb 2023 06:30:18 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-13603/ An issue was discovered in the HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader Windows Biometric Framework driver 5.0.0.5. It has a statically coded initialization vector to encrypt a user’s fingerprint image, resulting in weak encryption of that. This, in combination with retrieving an encrypted fingerprint image and encryption key (through another vulnerability), allows […]

The post CVE-2019-13603 appeared first on CVE Vulnerability.

]]> An issue was discovered in the HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader Windows Biometric Framework driver 5.0.0.5. It has a statically coded initialization vector to encrypt a user’s fingerprint image, resulting in weak encryption of that. This, in combination with retrieving an encrypted fingerprint image and encryption key (through another vulnerability), allows an attacker to obtain a user’s fingerprint image.

The post CVE-2019-13603 appeared first on CVE Vulnerability.

]]>