Back to Database
Status published
Medium
CVE-2019-18618
Incorrect access control in the firmware of Synaptics VFS75xx family...
Vulnerability Description
Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-18618
Credits & Attribution
No credits recorded in the NVD database.
References
Affected Vendor
synaptics
View all reports →Affected Software
vfs75xx firmware, thinkpad 25 firmware, thankpad a475 firmware, thankpad a485 firmware, thinkpad e480 firmware, thinkpad e580 firmware, thinkpad e485 firmware, thinkpad e585 firmware, thinkpad e490s firmware, thinkpad s3 firmware, thinkpad e490 firmware, thinkpad e590 firmware, thinkpad r490 firmware, thinkpad r590 firmware, thinkpad l480 firmware, thinkpad l580 firmware, thinkpad p1 firmware, thinkpad p1 gen 2 firmware, thinkpad x1 extreme 2nd firmware, thinkpad p43s firmware, thinkpad p50 firmware, thinkpad p51 firmware, thinkpad p51s \(20jx\) firmware, thinkpad p51s \(20kx\) firmware, thinkpad p51s \(20hx\) firmware, thinkpad p52 firmware, thinkpad p52s firmware, thinkpad p53 firmware, thinkpad p53s firmware, thinkpad p70 firmware, thinkpad p71 \(20hx\) firmware, thinkpad p72 firmware, thinkpad p73 firmware, thinkpad t25 \(20k7\) firmware, thinkpad t460p firmware, thinkpad t460s firmware, thinkpad t470 \(20hx\) firmware, thinkpad t470 \(20jx\) firmware, thinkpad t470p firmware, thinkpad t470s \(20hx\) firmware, thinkpad t470s \(20jx\) firmware, thinkpad t480 firmware, thinkpad t480s firmware, thinkpad t490 firmware, thinkpad t490s firmware, thinkpad t570 \(20hx\) firmware, thinkpad t570\(20jx\) firmware, thinkpad t580 firmware, thinkpad t590 firmware, thinkpad x1 carbon \(20hx\) firmware, thinkpad x1 carbon \(20kx\) firmware, thinkpad x1 carbon firmware, thinkpad x1 yoga 4th gen firmware, thinkpad x1 extreme firmware, thinkpad x1 tablet firmware, thinkpad x1 tablet \(20jx\) firmware, thinkpad x1 yoga firmware, thinkpad x1 yoga \(20jx\) firmware, thinkpad x1 yoga 3rd gen firmware, thinkpad x270 firmware, thinkpad x280 firmware, thinkpad x380 yoga firmware, thinkpad x390 firmware, thinkpad x390 yoga firmware, thinkpad yoga 370 firmware, thinkpad s1 3rd firmware, thinkpad yoga 260 firmware, thinkpad yoga s1 firmware, thinkpad a275 firmware, elite x2 1012 g2 firmware, elite x2 1013 g3 firmware, elite x2 g4 firmware, elitebook 1040 g4 firmware, elitebook 1050 g1 firmware, elitebook 735 g5 firmware, elitebook 735 g6 firmware, elitebook 745 g5 firmware, elitebook 745 g6 firmware, elitebook 755 g5 firmware, elitebook 830 g5 firmware, elitebook 830 g6 firmware, elitebook 836 g5 firmware, elitebook 836 g6 firmware, elitebook 840 g5 firmware, elitebook 840 g5 healthcare edition firmware, elitebook 840 g6 firmware, elitebook 840 g6 healthcare edition firmware, elitebook 846 g5 firmware, elitebook 846 g5 healthcare edition firmware, elitebook 846 g6 firmware, elitebook 846 g6 healthcare edition firmware, elitebook 850 g5 firmware, elitebook 850 g6 firmware, elitebook x360 1020 g2 firmware, elitebook x360 1030 g2 firmware, elitebook x360 1030 g3 firmware, elitebook x360 1030 g4 firmware, elitebook x360 1040 g5 firmware, elitebook x360 1040 g6 firmware, elitebook x360 830 g5 firmware, elitebook x360 830 g6 firmware, pro x2 612 g2 firmware, probook 430 g6 firmware, probook 440 g6 firmware, probook 445 g6 firmware, probook 445r g6 firmware, probook 450 g6 firmware, probook 455 g6 firmware, probook 455r g6 firmware, probook 640 g5 firmware, probook 650 g5 firmware, zbook 14u g5 firmware, zbook 14u g6 firmware, zbook 15 g5 firmware, zbook 15 g6 firmware, zbook 15u g5 firmware, zbook 15u g6 firmware, zbook 17 g5 firmware, zbook 17 g6 firmware, zbook studio g5 firmware, zbook studio x360 g5 firmware, zhan 66 pro 13 g2 firmware, zhan 66 pro 14 g2 firmware, zhan 66 pro 15 g2 firmware, zhan x 13 g2 firmware, elite slice firmware, eliteone 1000 g1 firmware, eliteone 1000 g2 firmware, mt44 firmware, mt45 firmware, envy x360 firmware, pavilion x360 firmware, spectre x360 firmware
Vulnerable Versions:
5.1.5.51, 5.1.337.26, 5.1.3507.26, 5.2.320.26, 5.2.524.26, 5.2.3109.26, 5.2.3530.26, 5.2.5024.26, 5.3.3541.26, 5.5.4.1116, 5.5.8.1092, 5.5.10.1100, 5.5.10.1106, 5.5.17.1099, 5.5.17.1102, 5.5.35.1058, 5.5.502.79, 5.5.512.1051, 5.5.2734.1050, 5.5.2810.1050, 0
Timeline
Official Publish:
July 22nd, 2020
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.