cbcvebase.
CVE-2019-18618
published 2020-07-22

CVE-2019-18618: Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows…

medium6CVSS 3.1
AVLACLPRHUINSUCHIHAN
Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table.

Affected

147 ranges· showing 25
VendorProductVersion rangeFixed in
hpelite_slice_firmware< 5.2.3110.265.2.3110.26
hpelite_x2_1012_g2_firmware< 5.2.5026.265.2.5026.26
hpelite_x2_1013_g3_firmware< 5.5.21.10995.5.21.1099
hpelite_x2_g4_firmware< 5.5.21.10995.5.21.1099
hpelitebook_1040_g4_firmware< 5.2.5026.265.2.5026.26
hpelitebook_1050_g1_firmware< 5.5.21.10995.5.21.1099
hpelitebook_735_g5_firmware< 5.5.21.10995.5.21.1099
hpelitebook_735_g6_firmware< 5.5.21.10995.5.21.1099
hpelitebook_745_g5_firmware< 5.5.21.10995.5.21.1099
hpelitebook_745_g6_firmware< 5.5.21.10995.5.21.1099
hpelitebook_755_g5_firmware< 5.5.21.10995.5.21.1099
hpelitebook_830_g5_firmware< 5.5.21.10995.5.21.1099
hpelitebook_830_g6_firmware< 5.5.21.10995.5.21.1099
hpelitebook_836_g5_firmware< 5.5.21.10995.5.21.1099
hpelitebook_836_g6_firmware< 5.5.21.10995.5.21.1099
hpelitebook_840_g5_firmware< 5.5.21.10995.5.21.1099
hpelitebook_840_g5_healthcare_edition_firmware< 5.5.21.10995.5.21.1099
hpelitebook_840_g6_firmware< 5.5.21.10995.5.21.1099
hpelitebook_840_g6_healthcare_edition_firmware< 5.5.21.10995.5.21.1099
hpelitebook_846_g5_firmware< 5.5.21.10995.5.21.1099
hpelitebook_846_g5_healthcare_edition_firmware< 5.5.21.10995.5.21.1099
hpelitebook_846_g6_firmware< 5.5.21.10995.5.21.1099
hpelitebook_846_g6_healthcare_edition_firmware< 5.5.21.10995.5.21.1099
hpelitebook_850_g5_firmware< 5.5.21.10995.5.21.1099
hpelitebook_850_g6_firmware< 5.5.21.10995.5.21.1099