github - ghsa-w3jx-33qh-77f8

GHSA-W3JX-33QH-77F8

Vulnerability from github – Published: 2024-01-12 03:30 – Updated: 2024-01-12 03:30

Details

ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor. This fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity. Version which is lower than 3.0.12011.08009(Legacy)/3.3.12011.08103(ESS) would suffer this risk on DELL Inspiron platform.

Severity ?

6.0 (Medium)


                  
                    CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-0454"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-290"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-01-12T02:15:44Z",
    "severity": "MODERATE"
  },
  "details": "ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor.\nThis fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity.\nVersion which is lower than 3.0.12011.08009(Legacy)/3.3.12011.08103(ESS) would suffer this risk on DELL Inspiron platform.",
  "id": "GHSA-w3jx-33qh-77f8",
  "modified": "2024-01-12T03:30:49Z",
  "published": "2024-01-12T03:30:49Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0454"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/advisories/GHSA-w3jx-33qh-77f8"
    },
    {
      "type": "WEB",
      "url": "https://www.emc.com.tw/emc/tw/vulnerability-disclosure-policy"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L",
      "type": "CVSS_V3"
    }
  ]
}

CVE-2024-0454 (GCVE-0-2024-0454)

Vulnerability from cvelistv5 – Published: 2024-01-12 01:48 – Updated: 2024-11-06 17:10

Summary

Severity ?

6 (Medium)


                        
                          CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

CWE

CWE-290 - Authentication Bypass by Spoofing

Assigner

ELAN

References

URL

Tags

https://www.emc.com.tw/emc/tw/vulnerability-discl…

Impacted products

	Vendor	Product	Version
	ELAN	DELL Inspiron	Affected: 3.0.12011.08001 , < 3.0.12011.08009 (custom) Affected: 3.3.12011.08101 , < 3.3.12011.08103 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T18:04:49.725Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.emc.com.tw/emc/tw/vulnerability-disclosure-policy"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:elan:dell_inspiron:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dell_inspiron",
            "vendor": "elan",
            "versions": [
              {
                "lessThan": "3.0.12011.08009",
                "status": "affected",
                "version": "3.0.12011.08001",
                "versionType": "custom"
              },
              {
                "lessThan": "3.3.12011.08103",
                "status": "affected",
                "version": "3.3.12011.08101",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-0454",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-06T17:07:08.650230Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-06T17:10:10.844Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "modules": [
            "Windows Hello Identification"
          ],
          "packageName": "UMDF Driver",
          "platforms": [
            "Windows"
          ],
          "product": "DELL Inspiron",
          "vendor": "ELAN",
          "versions": [
            {
              "lessThan": "3.0.12011.08009",
              "status": "affected",
              "version": "3.0.12011.08001",
              "versionType": "custom"
            },
            {
              "lessThan": "3.3.12011.08103",
              "status": "affected",
              "version": "3.3.12011.08101",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2024-01-12T01:30:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor.\u003cbr\u003eThis fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity.\u003cbr\u003eVersion which is lower than 3.0.12011.08009(Legacy)/3.3.12011.08103(ESS) would suffer this risk on DELL Inspiron platform."
            }
          ],
          "value": "ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor.\nThis fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity.\nVersion which is lower than 3.0.12011.08009(Legacy)/3.3.12011.08103(ESS) would suffer this risk on DELL Inspiron platform."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-115",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-115 Authentication Bypass"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "LOW",
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-290",
              "description": "CWE-290 Authentication Bypass by Spoofing",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-12T01:48:47.887Z",
        "orgId": "36106deb-8e95-420b-a0a0-e70af5d245df",
        "shortName": "ELAN"
      },
      "references": [
        {
          "url": "https://www.emc.com.tw/emc/tw/vulnerability-disclosure-policy"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Security Vulnerability on Match-on-Chip FPR Architecture",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "36106deb-8e95-420b-a0a0-e70af5d245df",
    "assignerShortName": "ELAN",
    "cveId": "CVE-2024-0454",
    "datePublished": "2024-01-12T01:48:47.887Z",
    "dateReserved": "2024-01-12T01:47:40.093Z",
    "dateUpdated": "2024-11-06T17:10:10.844Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

GHSA-W3JX-33QH-77F8

CVE-2024-0454 (GCVE-0-2024-0454)

Tags

Sightings

Nomenclature