6

CVE-2019-18618

EPSS 0.37%
Published 22.07.2020 14:15:14
Last modified 21.11.2024 04:33:22
Source cve@mitre.org
Teams watchlist Login
Open Login

Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table.

Affected products Warnungen 0 Metrics 3 CWE 0 References 7

Data is provided by the National Vulnerability Database (NVD)

Synaptics ≫ Vfs75xx Firmware Version5.1.5.51

Synaptics ≫ Vfs75xx Version-

Synaptics ≫ Vfs75xx Firmware Version5.1.337.26

Synaptics ≫ Vfs75xx Version-

Synaptics ≫ Vfs75xx Firmware Version5.1.3507.26

Synaptics ≫ Vfs75xx Version-

Synaptics ≫ Vfs75xx Firmware Version5.2.320.26

Synaptics ≫ Vfs75xx Version-

Synaptics ≫ Vfs75xx Firmware Version5.2.524.26

Synaptics ≫ Vfs75xx Version-

Synaptics ≫ Vfs75xx Firmware Version5.2.3109.26

Synaptics ≫ Vfs75xx Version-

Synaptics ≫ Vfs75xx Firmware Version5.2.3530.26

Synaptics ≫ Vfs75xx Version-

Synaptics ≫ Vfs75xx Firmware Version5.2.5024.26

Synaptics ≫ Vfs75xx Version-

Synaptics ≫ Vfs75xx Firmware Version5.3.3541.26

Synaptics ≫ Vfs75xx Version-

Synaptics ≫ Vfs75xx Firmware Version5.5.4.1116

Synaptics ≫ Vfs75xx Version-

Synaptics ≫ Vfs75xx Firmware Version5.5.8.1092

Synaptics ≫ Vfs75xx Version-

Synaptics ≫ Vfs75xx Firmware Version5.5.10.1100

Synaptics ≫ Vfs75xx Version-

Synaptics ≫ Vfs75xx Firmware Version5.5.10.1106

Synaptics ≫ Vfs75xx Version-

Synaptics ≫ Vfs75xx Firmware Version5.5.17.1099

Synaptics ≫ Vfs75xx Version-

Synaptics ≫ Vfs75xx Firmware Version5.5.17.1102

Synaptics ≫ Vfs75xx Version-

Synaptics ≫ Vfs75xx Firmware Version5.5.35.1058

Synaptics ≫ Vfs75xx Version-

Synaptics ≫ Vfs75xx Firmware Version5.5.502.79

Synaptics ≫ Vfs75xx Version-

Synaptics ≫ Vfs75xx Firmware Version5.5.512.1051

Synaptics ≫ Vfs75xx Version-

Synaptics ≫ Vfs75xx Firmware Version5.5.2734.1050

Synaptics ≫ Vfs75xx Version-

Synaptics ≫ Vfs75xx Firmware Version5.5.2810.1050

Synaptics ≫ Vfs75xx Version-

Lenovo ≫ Thinkpad 25 Firmware Version < 5.2.3540.26

Lenovo ≫ Thinkpad 25 Version-

Lenovo ≫ Thankpad A475 Firmware Version < 5.02.3539.0026

Lenovo ≫ Thankpad A475 Version-

Lenovo ≫ Thankpad A485 Firmware Version < 5.03.3542.0026

Lenovo ≫ Thankpad A485 Version-

Lenovo ≫ Thinkpad E480 Firmware Version < 5.2.321.26

Lenovo ≫ Thinkpad E480 Version-

Lenovo ≫ Thinkpad E580 Firmware Version < 5.2.321.26

Lenovo ≫ Thinkpad E580 Version-

Lenovo ≫ Thinkpad E485 Firmware Version < 5.2.321.26

Lenovo ≫ Thinkpad E485 Version-

Lenovo ≫ Thinkpad E585 Firmware Version < 5.2.321.26

Lenovo ≫ Thinkpad E585 Version-

Lenovo ≫ Thinkpad E490s Firmware Version < 5.2.321.26

Lenovo ≫ Thinkpad E490s Version-

Lenovo ≫ Thinkpad S3 Firmware Version < 5.2.321.26

Lenovo ≫ Thinkpad S3 Version-

Lenovo ≫ Thinkpad E490 Firmware Version < 5.2.321.26

Lenovo ≫ Thinkpad E490 Version-

Lenovo ≫ Thinkpad E590 Firmware Version < 5.2.321.26

Lenovo ≫ Thinkpad E590 Version-

Lenovo ≫ Thinkpad R490 Firmware Version < 5.2.321.26

Lenovo ≫ Thinkpad R490 Version-

Lenovo ≫ Thinkpad R590 Firmware Version < 5.2.321.26

Lenovo ≫ Thinkpad R590 Version-

Lenovo ≫ Thinkpad L480 Firmware Version < 5.3.3542.26

Lenovo ≫ Thinkpad L480 Version-

Lenovo ≫ Thinkpad L580 Firmware Version < 5.3.3542.26

Lenovo ≫ Thinkpad L580 Version-

Lenovo ≫ Thinkpad P1 Firmware Version < 5.3.3542.26

Lenovo ≫ Thinkpad P1 Version-

Lenovo ≫ Thinkpad P1 Gen 2 Firmware Version < 6.0.36.1105

Lenovo ≫ Thinkpad P1 Gen 2 Version-

Lenovo ≫ Thinkpad X1 Extreme 2nd Firmware Version < 6.0.36.1105

Lenovo ≫ Thinkpad X1 Extreme 2nd Version-

Lenovo ≫ Thinkpad P43s Firmware Version < 6.0.36.1105

Lenovo ≫ Thinkpad P43s Version-

Lenovo ≫ Thinkpad P50 Firmware Version < 5.1.338.26

Lenovo ≫ Thinkpad P50 Version-

Lenovo ≫ Thinkpad P51 Firmware Version < 5.2.3540.26

Lenovo ≫ Thinkpad P51 Version-

Lenovo ≫ Thinkpad P51s (20jx) Firmware Version < 5.2.3540.26

Lenovo ≫ Thinkpad P51s (20jx) Version-

Lenovo ≫ Thinkpad P51s (20kx) Firmware Version < 5.2.3540.26

Lenovo ≫ Thinkpad P51s (20kx) Version-

Lenovo ≫ Thinkpad P51s (20hx) Firmware Version < 5.2.3540.26

Lenovo ≫ Thinkpad P51s (20hx) Version-

Lenovo ≫ Thinkpad P52 Firmware Version < 5.2.3540.26

Lenovo ≫ Thinkpad P52 Version-

Lenovo ≫ Thinkpad P52s Firmware Version < 5.3.3542.26

Lenovo ≫ Thinkpad P52s Version-

Lenovo ≫ Thinkpad P53 Firmware Version < 6.0.36.1105

Lenovo ≫ Thinkpad P53 Version-

Lenovo ≫ Thinkpad P53s Firmware Version < 6.0.36.1105

Lenovo ≫ Thinkpad P53s Version-

Lenovo ≫ Thinkpad P70 Firmware Version < 5.1.338.26

Lenovo ≫ Thinkpad P70 Version-

Lenovo ≫ Thinkpad P71 (20hx) Firmware Version < 5.2.3540.26

Lenovo ≫ Thinkpad P71 (20hx) Version-

Lenovo ≫ Thinkpad P72 Firmware Version < 5.3.3542.26

Lenovo ≫ Thinkpad P72 Version-

Lenovo ≫ Thinkpad P73 Firmware Version < 5.3.3542.26

Lenovo ≫ Thinkpad P73 Version-

Lenovo ≫ Thinkpad T25 (20k7) Firmware Version < 5.2.3540.26

Lenovo ≫ Thinkpad T25 (20k7) Version-

Lenovo ≫ Thinkpad T460p Firmware Version < 5.1.338.26

Lenovo ≫ Thinkpad T460p Version-

Lenovo ≫ Thinkpad T460s Firmware Version < 5.1.338.26

Lenovo ≫ Thinkpad T460s Version-

Lenovo ≫ Thinkpad T470 (20hx) Firmware Version < 5.2.3540.26

Lenovo ≫ Thinkpad T470 (20hx) Version-

Lenovo ≫ Thinkpad T470 (20jx) Firmware Version < 5.2.3540.26

Lenovo ≫ Thinkpad T470 (20jx) Version-

Lenovo ≫ Thinkpad T470p Firmware Version < 5.2.3540.26

Lenovo ≫ Thinkpad T470p Version-

Lenovo ≫ Thinkpad T470s (20hx) Firmware Version < 5.2.3540.26

Lenovo ≫ Thinkpad T470s (20hx) Version-

Lenovo ≫ Thinkpad T470s (20jx) Firmware Version < 5.2.3540.26

Lenovo ≫ Thinkpad T470s (20jx) Version-

Lenovo ≫ Thinkpad T480 Firmware Version < 5.3.3542.26

Lenovo ≫ Thinkpad T480 Version-

Lenovo ≫ Thinkpad T480s Firmware Version < 5.3.3542.26

Lenovo ≫ Thinkpad T480s Version-

Lenovo ≫ Thinkpad T490 Firmware Version < 6.0.36.1105

Lenovo ≫ Thinkpad T490 Version-

Lenovo ≫ Thinkpad T490s Firmware Version < 6.0.36.1105

Lenovo ≫ Thinkpad T490s Version-

Lenovo ≫ Thinkpad T570 (20hx) Firmware Version < 5.2.3540.26

Lenovo ≫ Thinkpad T570 (20hx) Version-

Lenovo ≫ Thinkpad T570(20jx) Firmware Version < 5.2.3540.26

Lenovo ≫ Thinkpad T570(20jx) Version-

Lenovo ≫ Thinkpad T580 Firmware Version < 5.3.3542.26

Lenovo ≫ Thinkpad T580 Version-

Lenovo ≫ Thinkpad T590 Firmware Version < 6.0.36.1105

Lenovo ≫ Thinkpad T590 Version-

Lenovo ≫ Thinkpad X1 Carbon (20hx) Firmware Version < 5.2.3540.26

Lenovo ≫ Thinkpad X1 Carbon (20hx) Version-

Lenovo ≫ Thinkpad X1 Carbon (20kx) Firmware Version < 5.3.3542.26

Lenovo ≫ Thinkpad X1 Carbon (20kx) Version-

Lenovo ≫ Thinkpad X1 Carbon Firmware Version < 5.1.338.26

Lenovo ≫ Thinkpad X1 Carbon Version-

Lenovo ≫ Thinkpad X1 Yoga 4th Gen Firmware Version < 5.1.338.26

Lenovo ≫ Thinkpad X1 Yoga 4th Gen Version-

Lenovo ≫ Thinkpad X1 Extreme Firmware Version < 5.3.3542.26

Lenovo ≫ Thinkpad X1 Extreme Version-

Lenovo ≫ Thinkpad X1 Tablet Firmware Version < 5.5.40.1058

Lenovo ≫ Thinkpad X1 Tablet Version-

Lenovo ≫ Thinkpad X1 Tablet (20jx) Firmware Version < 5.2.227.26

Lenovo ≫ Thinkpad X1 Tablet (20jx) Version-

Lenovo ≫ Thinkpad X1 Yoga Firmware Version < 5.1.338.26

Lenovo ≫ Thinkpad X1 Yoga Version-

Lenovo ≫ Thinkpad X1 Yoga (20jx) Firmware Version < 5.2.3540.26

Lenovo ≫ Thinkpad X1 Yoga (20jx) Version-

Lenovo ≫ Thinkpad X1 Yoga 3rd Gen Firmware Version < 5.3.3542.26

Lenovo ≫ Thinkpad X1 Yoga 3rd Gen Version-

Lenovo ≫ Thinkpad X270 Firmware Version < 5.2.3540.26

Lenovo ≫ Thinkpad X270 Version-

Lenovo ≫ Thinkpad X280 Firmware Version < 5.3.3542.26

Lenovo ≫ Thinkpad X280 Version-

Lenovo ≫ Thinkpad X380 Yoga Firmware Version < 5.3.3542.26

Lenovo ≫ Thinkpad X380 Yoga Version-

Lenovo ≫ Thinkpad X390 Firmware Version < 6.0.36.1105

Lenovo ≫ Thinkpad X390 Version-

Lenovo ≫ Thinkpad X390 Yoga Firmware Version < 6.0.36.1105

Lenovo ≫ Thinkpad X390 Yoga Version-

Lenovo ≫ Thinkpad Yoga 370 Firmware Version < 5.2.3540.26

Lenovo ≫ Thinkpad Yoga 370 Version-

Lenovo ≫ Thinkpad S1 3rd Firmware Version < 5.2.3540.26

Lenovo ≫ Thinkpad S1 3rd Version-

Lenovo ≫ Thinkpad Yoga 260 Firmware Version < 5.1.338.26

Lenovo ≫ Thinkpad Yoga 260 Version-

Lenovo ≫ Thinkpad Yoga S1 Firmware Version < 5.1.338.26

Lenovo ≫ Thinkpad Yoga S1 Version-

Lenovo ≫ Thinkpad A275 Firmware Version < 5.2.3535.26

Lenovo ≫ Thinkpad A275 Version-

Hp ≫ Elite X2 1012 G2 Firmware Version < 5.2.5026.26

Hp ≫ Elite X2 1012 G2 Version-

Hp ≫ Elite X2 1013 G3 Firmware Version < 5.5.21.1099

Hp ≫ Elite X2 1013 G3 Version-

Hp ≫ Elite X2 G4 Firmware Version < 5.5.21.1099

Hp ≫ Elite X2 G4 Version-

Hp ≫ Elitebook 1040 G4 Firmware Version < 5.2.5026.26

Hp ≫ Elitebook 1040 G4 Version-

Hp ≫ Elitebook 1050 G1 Firmware Version < 5.5.21.1099

Hp ≫ Elitebook 1050 G1 Version-

Hp ≫ Elitebook 735 G5 Firmware Version < 5.5.21.1099

Hp ≫ Elitebook 735 G5 Version-

Hp ≫ Elitebook 735 G6 Firmware Version < 5.5.21.1099

Hp ≫ Elitebook 735 G6 Version-

Hp ≫ Elitebook 745 G5 Firmware Version < 5.5.21.1099

Hp ≫ Elitebook 745 G5 Version-

Hp ≫ Elitebook 745 G6 Firmware Version < 5.5.21.1099

Hp ≫ Elitebook 745 G6 Version-

Hp ≫ Elitebook 755 G5 Firmware Version < 5.5.21.1099

Hp ≫ Elitebook 755 G5 Version-

Hp ≫ Elitebook 830 G5 Firmware Version < 5.5.21.1099

Hp ≫ Elitebook 830 G5 Version-

Hp ≫ Elitebook 830 G6 Firmware Version < 5.5.21.1099

Hp ≫ Elitebook 830 G6 Version-

Hp ≫ Elitebook 836 G5 Firmware Version < 5.5.21.1099

Hp ≫ Elitebook 836 G5 Version-

Hp ≫ Elitebook 836 G6 Firmware Version < 5.5.21.1099

Hp ≫ Elitebook 836 G6 Version-

Hp ≫ Elitebook 840 G5 Firmware Version < 5.5.21.1099

Hp ≫ Elitebook 840 G5 Version-

Hp ≫ Elitebook 840 G5 Healthcare Edition Firmware Version < 5.5.21.1099

Hp ≫ Elitebook 840 G5 Healthcare Edition Version-

Hp ≫ Elitebook 840 G6 Firmware Version < 5.5.21.1099

Hp ≫ Elitebook 840 G6 Version-

Hp ≫ Elitebook 840 G6 Healthcare Edition Firmware Version < 5.5.21.1099

Hp ≫ Elitebook 840 G6 Healthcare Edition Version-

Hp ≫ Elitebook 846 G5 Firmware Version < 5.5.21.1099

Hp ≫ Elitebook 846 G5 Version-

Hp ≫ Elitebook 846 G5 Healthcare Edition Firmware Version < 5.5.21.1099

Hp ≫ Elitebook 846 G5 Healthcare Edition Version-

Hp ≫ Elitebook 846 G6 Firmware Version < 5.5.21.1099

Hp ≫ Elitebook 846 G6 Version-

Hp ≫ Elitebook 846 G6 Healthcare Edition Firmware Version < 5.5.21.1099

Hp ≫ Elitebook 846 G6 Healthcare Edition Version-

Hp ≫ Elitebook 850 G5 Firmware Version < 5.5.21.1099

Hp ≫ Elitebook 850 G5 Version-

Hp ≫ Elitebook 850 G6 Firmware Version < 5.5.21.1099

Hp ≫ Elitebook 850 G6 Version-

Hp ≫ Elitebook X360 1020 G2 Firmware Version < 5.2.5026.26

Hp ≫ Elitebook X360 1020 G2 Version-

Hp ≫ Elitebook X360 1030 G2 Firmware Version < 5.2.5026.26

Hp ≫ Elitebook X360 1030 G2 Version-

Hp ≫ Elitebook X360 1030 G3 Firmware Version < 5.5.21.1099

Hp ≫ Elitebook X360 1030 G3 Version-

Hp ≫ Elitebook X360 1030 G4 Firmware Version < 5.5.21.1099

Hp ≫ Elitebook X360 1030 G4 Version-

Hp ≫ Elitebook X360 1040 G5 Firmware Version < 5.5.21.1099

Hp ≫ Elitebook X360 1040 G5 Version-

Hp ≫ Elitebook X360 1040 G6 Firmware Version < 5.5.21.1099

Hp ≫ Elitebook X360 1040 G6 Version-

Hp ≫ Elitebook X360 830 G5 Firmware Version < 5.5.21.1099

Hp ≫ Elitebook X360 830 G5 Version-

Hp ≫ Elitebook X360 830 G6 Firmware Version < 5.5.21.1099

Hp ≫ Elitebook X360 830 G6 Version-

Hp ≫ Pro X2 612 G2 Firmware Version < 5.2.5026.26

Hp ≫ Pro X2 612 G2 Version-

Hp ≫ Probook 430 G6 Firmware Version < 5.5.21.1099

Hp ≫ Probook 430 G6 Version-

Hp ≫ Probook 440 G6 Firmware Version < 5.5.21.1099

Hp ≫ Probook 440 G6 Version-

Hp ≫ Probook 445 G6 Firmware Version < 5.5.21.1099

Hp ≫ Probook 445 G6 Version-

Hp ≫ Probook 445r G6 Firmware Version < 5.5.21.1099

Hp ≫ Probook 445r G6 Version-

Hp ≫ Probook 450 G6 Firmware Version < 5.5.21.1099

Hp ≫ Probook 450 G6 Version-

Hp ≫ Probook 455 G6 Firmware Version < 5.5.21.1099

Hp ≫ Probook 455 G6 Version-

Hp ≫ Probook 455r G6 Firmware Version < 5.5.21.1099

Hp ≫ Probook 455r G6 Version-

Hp ≫ Probook 640 G5 Firmware Version < 5.5.21.1099

Hp ≫ Probook 640 G5 Version-

Hp ≫ Probook 650 G5 Firmware Version < 5.5.21.1099

Hp ≫ Probook 650 G5 Version-

Hp ≫ Zbook 14u G5 Firmware Version < 5.5.21.1099

Hp ≫ Zbook 14u G5 Version-

Hp ≫ Zbook 14u G6 Firmware Version < 5.5.21.1099

Hp ≫ Zbook 14u G6 Version-

Hp ≫ Zbook 15 G5 Firmware Version < 5.5.21.1099

Hp ≫ Zbook 15 G5 Version-

Hp ≫ Zbook 15 G6 Firmware Version < 5.5.21.1099

Hp ≫ Zbook 15 G6 Version-

Hp ≫ Zbook 15u G5 Firmware Version < 5.5.21.1099

Hp ≫ Zbook 15u G5 Version-

Hp ≫ Zbook 15u G6 Firmware Version < 5.5.21.1099

Hp ≫ Zbook 15u G6 Version-

Hp ≫ Zbook 17 G5 Firmware Version < 5.5.21.1099

Hp ≫ Zbook 17 G5 Version-

Hp ≫ Zbook 17 G6 Firmware Version < 5.5.21.1099

Hp ≫ Zbook 17 G6 Version-

Hp ≫ Zbook Studio G5 Firmware Version < 5.5.21.1099

Hp ≫ Zbook Studio G5 Version-

Hp ≫ Zbook Studio X360 G5 Firmware Version < 5.5.21.1099

Hp ≫ Zbook Studio X360 G5 Version-

Hp ≫ Zhan 66 Pro 13 G2 Firmware Version < 5.5.21.1099

Hp ≫ Zhan 66 Pro 13 G2 Version-

Hp ≫ Zhan 66 Pro 14 G2 Firmware Version < 5.5.21.1099

Hp ≫ Zhan 66 Pro 14 G2 Version-

Hp ≫ Zhan 66 Pro 15 G2 Firmware Version < 5.5.21.1099

Hp ≫ Zhan 66 Pro 15 G2 Version-

Hp ≫ Zhan X 13 G2 Firmware Version < 5.5.21.1099

Hp ≫ Zhan X 13 G2 Version-

Hp ≫ Elite Slice Firmware Version < 5.2.3110.26

Hp ≫ Elite Slice Version-

Hp ≫ Eliteone 1000 G1 Firmware Version < 5.2.5026.26

Hp ≫ Eliteone 1000 G1 Version-

Hp ≫ Eliteone 1000 G2 Firmware Version < 5.5.21.1099

Hp ≫ Eliteone 1000 G2 Version-

Hp ≫ Mt44 Firmware Version < 5.5.21.1099

Hp ≫ Mt44 Version-

Hp ≫ Mt45 Firmware Version < 5.5.21.1099

Hp ≫ Mt45 Version-

Hp ≫ Envy X360 Firmware Version < 5.5.26.1102

Hp ≫ Envy X360 Version-

Hp ≫ Pavilion X360 Firmware Version < 5.5.8.1116

Hp ≫ Pavilion X360 Version-

Hp ≫ Spectre X360 Firmware Version < 5.5.26.1102

Hp ≫ Spectre X360 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.37%	0.582

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6	0.8	5.2	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
nvd@nist.gov	3.6	3.9	4.9	AV:L/AC:L/Au:N/C:P/I:P/A:N

https://www.synaptics.com/company/blog/

Vendor Advisory

https://support.hp.com/us-en/document/c06696474

Patch

Third Party Advisory

https://support.lenovo.com/us/en/product_security/LEN-31372

Patch

Third Party Advisory

https://www.synaptics.com/sites/default/files/fingerprint-sensor-VFS7500-security-brief-2020-07-14.pdf

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2019-18618

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-18618

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-18618

EUVD