CVE-2019-18618

Orta

Açıklama

Harici flaş içeren Synaptics VFS75xx ailesi parmak izi sensörlerinin aygıt yazılımındaki (2019-11-15 öncesindeki tüm sürümler) hatalı erişim kontrolü, yerel bir yöneticinin veya fiziksel saldırganın doğrulanmamış bir bölüm tablosu enjeksiyonu yoluyla sensör verilerinin gizliliğini tehlikeye atmasına olanak tanır.

ÖnemOrta
CVSS6.0
İstismar olasılığı—
ÜrünSynaptics Vfs75xx Firmware
Yayın22 Tem 2020
İlk görülme22 Tem 2020

Nasıl düzeltilir

Güncelleyin
  • lenovo thinkpad_25_firmware5.2.3540.26 ya da sonraki bir sürüm
  • lenovo thankpad_a475_firmware5.02.3539.0026 ya da sonraki bir sürüm
  • lenovo thankpad_a485_firmware5.03.3542.0026 ya da sonraki bir sürüm
  • lenovo thinkpad_e480_firmware5.2.321.26 ya da sonraki bir sürüm
  • lenovo thinkpad_e580_firmware5.2.321.26 ya da sonraki bir sürüm
  • lenovo thinkpad_e485_firmware5.2.321.26 ya da sonraki bir sürüm
  • lenovo thinkpad_e585_firmware5.2.321.26 ya da sonraki bir sürüm
  • lenovo thinkpad_e490s_firmware5.2.321.26 ya da sonraki bir sürüm
  • lenovo thinkpad_s3_firmware5.2.321.26 ya da sonraki bir sürüm
  • lenovo thinkpad_e490_firmware5.2.321.26 ya da sonraki bir sürüm
  • lenovo thinkpad_e590_firmware5.2.321.26 ya da sonraki bir sürüm
  • lenovo thinkpad_r490_firmware5.2.321.26 ya da sonraki bir sürüm

Etkilenen ürünler

ÜrünEtkilenen sürümlerDüzeltildiği sürüm
synaptics vfs75xx_firmware5.1.5.51, 5.1.337.26, 5.1.3507.26, 5.2.320.26, 5.2.524.26, 5.2.3109.26, 5.2.3530.26, 5.2.5024.26, 5.3.3541.26, 5.5.4.1116, 5.5.8.1092, 5.5.10.1100, 5.5.10.1106, 5.5.17.1099, 5.5.17.1102, 5.5.35.1058, 5.5.502.79, 5.5.512.1051, 5.5.2734.1050, 5.5.2810.1050—
lenovo thinkpad_25_firmwarev < 5.2.3540.265.2.3540.26
lenovo thankpad_a475_firmwarev < 5.02.3539.00265.02.3539.0026
lenovo thankpad_a485_firmwarev < 5.03.3542.00265.03.3542.0026
lenovo thinkpad_e480_firmwarev < 5.2.321.265.2.321.26
lenovo thinkpad_e580_firmwarev < 5.2.321.265.2.321.26
lenovo thinkpad_e485_firmwarev < 5.2.321.265.2.321.26
lenovo thinkpad_e585_firmwarev < 5.2.321.265.2.321.26
lenovo thinkpad_e490s_firmwarev < 5.2.321.265.2.321.26
lenovo thinkpad_s3_firmwarev < 5.2.321.265.2.321.26
lenovo thinkpad_e490_firmwarev < 5.2.321.265.2.321.26
lenovo thinkpad_e590_firmwarev < 5.2.321.265.2.321.26
lenovo thinkpad_r490_firmwarev < 5.2.321.265.2.321.26
lenovo thinkpad_r590_firmwarev < 5.2.321.265.2.321.26
lenovo thinkpad_l480_firmwarev < 5.3.3542.265.3.3542.26
lenovo thinkpad_l580_firmwarev < 5.3.3542.265.3.3542.26
lenovo thinkpad_p1_firmwarev < 5.3.3542.265.3.3542.26
lenovo thinkpad_p1_gen_2_firmwarev < 6.0.36.11056.0.36.1105
lenovo thinkpad_x1_extreme_2nd_firmwarev < 6.0.36.11056.0.36.1105
lenovo thinkpad_p43s_firmwarev < 6.0.36.11056.0.36.1105
lenovo thinkpad_p50_firmwarev < 5.1.338.265.1.338.26
lenovo thinkpad_p51_firmwarev < 5.2.3540.265.2.3540.26
lenovo thinkpad_p51s_\(20jx\)_firmwarev < 5.2.3540.265.2.3540.26
lenovo thinkpad_p51s_\(20kx\)_firmwarev < 5.2.3540.265.2.3540.26
lenovo thinkpad_p51s_\(20hx\)_firmwarev < 5.2.3540.265.2.3540.26
lenovo thinkpad_p52_firmwarev < 5.2.3540.265.2.3540.26
lenovo thinkpad_p52s_firmwarev < 5.3.3542.265.3.3542.26
lenovo thinkpad_p53_firmwarev < 6.0.36.11056.0.36.1105
lenovo thinkpad_p53s_firmwarev < 6.0.36.11056.0.36.1105
lenovo thinkpad_p70_firmwarev < 5.1.338.265.1.338.26
lenovo thinkpad_p71_\(20hx\)_firmwarev < 5.2.3540.265.2.3540.26
lenovo thinkpad_p72_firmwarev < 5.3.3542.265.3.3542.26
lenovo thinkpad_p73_firmwarev < 5.3.3542.265.3.3542.26
lenovo thinkpad_t25_\(20k7\)_firmwarev < 5.2.3540.265.2.3540.26
lenovo thinkpad_t460p_firmwarev < 5.1.338.265.1.338.26
lenovo thinkpad_t460s_firmwarev < 5.1.338.265.1.338.26
lenovo thinkpad_t470_\(20hx\)_firmwarev < 5.2.3540.265.2.3540.26
lenovo thinkpad_t470_\(20jx\)_firmwarev < 5.2.3540.265.2.3540.26
lenovo thinkpad_t470p_firmwarev < 5.2.3540.265.2.3540.26
lenovo thinkpad_t470s_\(20hx\)_firmwarev < 5.2.3540.265.2.3540.26
lenovo thinkpad_t470s_\(20jx\)_firmwarev < 5.2.3540.265.2.3540.26
lenovo thinkpad_t480_firmwarev < 5.3.3542.265.3.3542.26
lenovo thinkpad_t480s_firmwarev < 5.3.3542.265.3.3542.26
lenovo thinkpad_t490_firmwarev < 6.0.36.11056.0.36.1105
lenovo thinkpad_t490s_firmwarev < 6.0.36.11056.0.36.1105
lenovo thinkpad_t570_\(20hx\)_firmwarev < 5.2.3540.265.2.3540.26
lenovo thinkpad_t570\(20jx\)_firmwarev < 5.2.3540.265.2.3540.26
lenovo thinkpad_t580_firmwarev < 5.3.3542.265.3.3542.26
lenovo thinkpad_t590_firmwarev < 6.0.36.11056.0.36.1105
lenovo thinkpad_x1_carbon_\(20hx\)_firmwarev < 5.2.3540.265.2.3540.26
lenovo thinkpad_x1_carbon_\(20kx\)_firmwarev < 5.3.3542.265.3.3542.26
lenovo thinkpad_x1_carbon_firmwarev < 5.1.338.265.1.338.26
lenovo thinkpad_x1_yoga_4th_gen_firmwarev < 5.1.338.265.1.338.26
lenovo thinkpad_x1_extreme_firmwarev < 5.3.3542.265.3.3542.26
lenovo thinkpad_x1_tablet_firmwarev < 5.5.40.10585.5.40.1058
lenovo thinkpad_x1_tablet_\(20jx\)_firmwarev < 5.2.227.265.2.227.26
lenovo thinkpad_x1_yoga_firmwarev < 5.1.338.265.1.338.26
lenovo thinkpad_x1_yoga_\(20jx\)_firmwarev < 5.2.3540.265.2.3540.26
lenovo thinkpad_x1_yoga_3rd_gen_firmwarev < 5.3.3542.265.3.3542.26
lenovo thinkpad_x270_firmwarev < 5.2.3540.265.2.3540.26
lenovo thinkpad_x280_firmwarev < 5.3.3542.265.3.3542.26
lenovo thinkpad_x380_yoga_firmwarev < 5.3.3542.265.3.3542.26
lenovo thinkpad_x390_firmwarev < 6.0.36.11056.0.36.1105
lenovo thinkpad_x390_yoga_firmwarev < 6.0.36.11056.0.36.1105
lenovo thinkpad_yoga_370_firmwarev < 5.2.3540.265.2.3540.26
lenovo thinkpad_s1_3rd_firmwarev < 5.2.3540.265.2.3540.26
lenovo thinkpad_yoga_260_firmwarev < 5.1.338.265.1.338.26
lenovo thinkpad_yoga_s1_firmwarev < 5.1.338.265.1.338.26
lenovo thinkpad_a275_firmwarev < 5.2.3535.265.2.3535.26
hp elite_x2_1012_g2_firmwarev < 5.2.5026.265.2.5026.26
hp elite_x2_1013_g3_firmwarev < 5.5.21.10995.5.21.1099
hp elite_x2_g4_firmwarev < 5.5.21.10995.5.21.1099
hp elitebook_1040_g4_firmwarev < 5.2.5026.265.2.5026.26
hp elitebook_1050_g1_firmwarev < 5.5.21.10995.5.21.1099
hp elitebook_735_g5_firmwarev < 5.5.21.10995.5.21.1099
hp elitebook_735_g6_firmwarev < 5.5.21.10995.5.21.1099
hp elitebook_745_g5_firmwarev < 5.5.21.10995.5.21.1099
hp elitebook_745_g6_firmwarev < 5.5.21.10995.5.21.1099
hp elitebook_755_g5_firmwarev < 5.5.21.10995.5.21.1099
hp elitebook_830_g5_firmwarev < 5.5.21.10995.5.21.1099
hp elitebook_830_g6_firmwarev < 5.5.21.10995.5.21.1099
hp elitebook_836_g5_firmwarev < 5.5.21.10995.5.21.1099
hp elitebook_836_g6_firmwarev < 5.5.21.10995.5.21.1099
hp elitebook_840_g5_firmwarev < 5.5.21.10995.5.21.1099
hp elitebook_840_g5_healthcare_edition_firmwarev < 5.5.21.10995.5.21.1099
hp elitebook_840_g6_firmwarev < 5.5.21.10995.5.21.1099
hp elitebook_840_g6_healthcare_edition_firmwarev < 5.5.21.10995.5.21.1099
hp elitebook_846_g5_firmwarev < 5.5.21.10995.5.21.1099
hp elitebook_846_g5_healthcare_edition_firmwarev < 5.5.21.10995.5.21.1099
hp elitebook_846_g6_firmwarev < 5.5.21.10995.5.21.1099
hp elitebook_846_g6_healthcare_edition_firmwarev < 5.5.21.10995.5.21.1099
hp elitebook_850_g5_firmwarev < 5.5.21.10995.5.21.1099
hp elitebook_850_g6_firmwarev < 5.5.21.10995.5.21.1099
hp elitebook_x360_1020_g2_firmwarev < 5.2.5026.265.2.5026.26
hp elitebook_x360_1030_g2_firmwarev < 5.2.5026.265.2.5026.26
hp elitebook_x360_1030_g3_firmwarev < 5.5.21.10995.5.21.1099
hp elitebook_x360_1030_g4_firmwarev < 5.5.21.10995.5.21.1099
hp elitebook_x360_1040_g5_firmwarev < 5.5.21.10995.5.21.1099
hp elitebook_x360_1040_g6_firmwarev < 5.5.21.10995.5.21.1099
hp elitebook_x360_830_g5_firmwarev < 5.5.21.10995.5.21.1099
hp elitebook_x360_830_g6_firmwarev < 5.5.21.10995.5.21.1099
hp pro_x2_612_g2_firmwarev < 5.2.5026.265.2.5026.26
hp probook_430_g6_firmwarev < 5.5.21.10995.5.21.1099
hp probook_440_g6_firmwarev < 5.5.21.10995.5.21.1099
hp probook_445_g6_firmwarev < 5.5.21.10995.5.21.1099
hp probook_445r_g6_firmwarev < 5.5.21.10995.5.21.1099
hp probook_450_g6_firmwarev < 5.5.21.10995.5.21.1099
hp probook_455_g6_firmwarev < 5.5.21.10995.5.21.1099
hp probook_455r_g6_firmwarev < 5.5.21.10995.5.21.1099
hp probook_640_g5_firmwarev < 5.5.21.10995.5.21.1099
hp probook_650_g5_firmwarev < 5.5.21.10995.5.21.1099
hp zbook_14u_g5_firmwarev < 5.5.21.10995.5.21.1099
hp zbook_14u_g6_firmwarev < 5.5.21.10995.5.21.1099
hp zbook_15_g5_firmwarev < 5.5.21.10995.5.21.1099
hp zbook_15_g6_firmwarev < 5.5.21.10995.5.21.1099
hp zbook_15u_g5_firmwarev < 5.5.21.10995.5.21.1099
hp zbook_15u_g6_firmwarev < 5.5.21.10995.5.21.1099
hp zbook_17_g5_firmwarev < 5.5.21.10995.5.21.1099
hp zbook_17_g6_firmwarev < 5.5.21.10995.5.21.1099
hp zbook_studio_g5_firmwarev < 5.5.21.10995.5.21.1099
hp zbook_studio_x360_g5_firmwarev < 5.5.21.10995.5.21.1099
hp zhan_66_pro_13_g2_firmwarev < 5.5.21.10995.5.21.1099
hp zhan_66_pro_14_g2_firmwarev < 5.5.21.10995.5.21.1099
hp zhan_66_pro_15_g2_firmwarev < 5.5.21.10995.5.21.1099
hp zhan_x_13_g2_firmwarev < 5.5.21.10995.5.21.1099
hp elite_slice_firmwarev < 5.2.3110.265.2.3110.26
hp eliteone_1000_g1_firmwarev < 5.2.5026.265.2.5026.26
hp eliteone_1000_g2_firmwarev < 5.5.21.10995.5.21.1099
hp mt44_firmwarev < 5.5.21.10995.5.21.1099
hp mt45_firmwarev < 5.5.21.10995.5.21.1099
hp envy_x360_firmwarev < 5.5.26.11025.5.26.1102
hp pavilion_x360_firmwarev < 5.5.8.11165.5.8.1116
hp spectre_x360_firmwarev < 5.5.26.11025.5.26.1102

Sürümünüzü kontrol edin

Ürünü seçin ve kullandığınız sürümü yazın; sürümün etkilenen aralıkta olup olmadığını görün.

Intelligence 360 paketinde

Attack Surface Management

Alan adlarınıza bağlı varlıkları, bu varlıklarda çalışan teknolojileri ve bilinen zafiyetleri tek listede görün.

CVE-2019-18618 · Synaptics Vfs75xx Firmware · Dark Radar