ASSA ABLOY HID DigitalPersona Firmware 24
Approved changes feed: RSS · Atom
cpe:2.3:o:assaabloy:hid_digitalpersona_4500_firmware:24:*:*:*:*:*:*:*
part: o version: 24 update: *
| Vendor | Assaabloy (13b2d9d8-0cf6-5cc8-94af-0785312c0fe5) |
|---|---|
| Product | Hid Digitalpersona 4500 Firmware (5017227f-182c-5c75-bdff-1ae6ce2a8a82) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-13604 |
vulnerable | 2026-06-03 14:39:42.958917 |
Details available
There is a short key vulnerability in HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader v24. The key for obfuscating the fingerprint image is vulnerable to brute-force attacks. This allows an attacker to recover the key and decrypt that image using the key. Successful exploitation causes a sensitive biometric information leak.
Published: 2019-07-15T13:47:12.000Z
Updated: 2024-08-04T23:57:39.456Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.