Approved changes feed: RSS · Atom

cpe:2.3:o:goodix:fingerprint_sensor_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorGoodix (3af462c0-6317-5398-ad38-22c9dbf4deea)
ProductFingerprint Sensor Firmware (b618e155-7457-537a-b2af-60bb460eb8f1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-50430 vulnerable 2026-06-08 06:16:16.139253 Details available
The Goodix Fingerprint Device, as shipped in Dell Inspiron 15 computers, does not follow the Secure Device Connection Protocol (SDCP) when enrolling via Linux, and accepts an unauthenticated configuration packet to select the Windows template database, which allows bypass of Windows Hello authentication by enrolling an attacker's fingerprint.
Published: 2023-12-09T00:00:00.000Z
Updated: 2024-08-02T22:16:46.671Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.