Auth bypass in Lenovo Veriface

CVE-2009-0655

Lenovo Veriface III allows physically proximate attackers to login to a Windows account by presenting a "plain image" of the authorized user.

Vulnerability class: Broken Authentication

EPSS: 0.004 (32.4th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References