CVE-2019-13604 - CVE House
Back to Database
Status published Medium CVE-2019-13604

There is a short key vulnerability in HID Global DigitalPersona...

Vulnerability Description

There is a short key vulnerability in HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader v24. The key for obfuscating the fingerprint image is vulnerable to brute-force attacks. This allows an attacker to recover the key and decrypt that image using the key. Successful exploitation causes a sensitive biometric information leak.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-13604

Credits & Attribution

No credits recorded in the NVD database.

References

More from assaabloy

View All →
CVE-2020-23826
The Yale WIPC-303W 2.21 through 2.31 camera is vulnerable to...
High 8.8
CVE-2020-10176
ASSA ABLOY Yale WIPC-301W 2.x.2.29 through 2.x.2.43_p1 devices allow Eval...
Critical 9.8

Affected Vendor

Affected Software

hid digitalpersona 4500 firmware
Vulnerable Versions:
24

Timeline

Official Publish: July 15th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.