{"id":"CVE-2024-0454","aliases":["EUVD-2024-16249","GHSA-w3jx-33qh-77f8"],"status":"published","title":"Security Vulnerability on Match-on-Chip FPR Architecture","description":"ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor.\nThis fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity.\nVersion which is lower than 3.0.12011.08009(Legacy)/3.3.12011.08103(ESS) would suffer this risk on DELL Inspiron platform.","severity":{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00253,"percentile":0.16862,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-290"],"published":"2024-01-12T01:48:47Z","modified":"2026-06-17T06:53:32Z","products":[{"vendor":"elan","product":"dell inspiron"},{"vendor":"elan","product":"dell_inspiron"},{"vendor":"emc","product":"elan_match-on-chip_fpr_solution_firmware"}],"references":[{"url":"https://www.emc.com.tw/emc/tw/vulnerability-disclosure-policy","tags":["x_transferred","Not Applicable"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-0454"},{"url":"https://github.com/advisories/GHSA-w3jx-33qh-77f8","tags":["Third Party Advisory"]}],"sources":{"cve":[{"id":"CVE-2024-0454","title":"Security Vulnerability on Match-on-Chip FPR Architecture","description":"ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor.\nThis fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity.\nVersion which is lower than 3.0.12011.08009(Legacy)/3.3.12011.08103(ESS) would suffer this risk on DELL Inspiron platform.","status":"published","published":"2024-01-12T01:48:47.887Z","modified":"2024-11-06T17:10:10.844Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-290"],"updated_at":"2026-11-02T14:34:22.852179Z"}],"euvd":[{"id":"EUVD-2024-16249","description":"ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor.\nThis fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity.\nVersion which is lower than 3.0.12011.08009(Legacy)/3.3.12011.08103(ESS) would suffer this risk on DELL Inspiron platform.","status":"published","published":"2024-01-12T01:48:47Z","modified":"2024-11-06T17:10:10Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L","level":"medium"}],"updated_at":"2026-11-03T00:05:09.226597Z"}],"ghsa":[{"id":"GHSA-w3jx-33qh-77f8","title":"ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and...","description":"ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor.\nThis fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity.\nVersion which is lower than 3.0.12011.08009(Legacy)/3.3.12011.08103(ESS) would suffer this risk on DELL Inspiron platform.","status":"published","published":"2024-01-12T03:30:49Z","modified":"2024-01-31T05:07:17Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L","level":"medium"}],"cwes":["CWE-290"],"updated_at":"2026-11-02T14:55:30.717237Z"}],"nvd":[{"id":"CVE-2024-0454","description":"ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor.\nThis fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity.\nVersion which is lower than 3.0.12011.08009(Legacy)/3.3.12011.08103(ESS) would suffer this risk on DELL Inspiron platform.","status":"published","published":"2024-01-12T02:15:44.867Z","modified":"2026-06-17T06:53:32.59Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-290"],"updated_at":"2026-11-02T14:09:30.070039Z"}]}}