Vulnerabilities > Synaptics > Fingerprint Driver > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-01-27 CVE-2023-6482 Use of Hard-coded Credentials vulnerability in Synaptics Fingerprint Driver 6.0.00.1111
Use of encryption key derived from static information in Synaptics Fingerprint Driver allows an attacker to set up a TLS session with the fingerprint sensor and send restricted commands to the fingerprint sensor. This may allow an attacker, who has physical access to the sensor, to enroll a fingerprint into the template database.
low complexity
synaptics CWE-798
5.2