VYPR
← All advisories
Medium severity6.0NVD Advisory· Published Jan 12, 2024· Updated Jun 17, 2026

CVE-2024-0454

CVE-2024-0454

Description

ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor. This fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity. Version which is lower than 3.0.12011.08009(Legacy)/3.3.12011.08103(ESS) would suffer this risk on DELL Inspiron platform.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Dell/Inspironllm-create
    Range: <3.0.12011.08009 (Legacy)/3.3.12011.08103 (ESS)
  • ELAN/Match-on-Chip FPRllm-fuzzy
    Range: <3.0.12011.08009 (Legacy)/3.3.12011.08103 (ESS)
  • ELAN/DELL Inspironv5
    Range: 3.0.12011.08001

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.