CVE-2019-12813

An issue was discovered in Digital Persona U.are.U 4500 Fingerprint Reader v24. The key and salt used for obfuscating the fingerprint image exhibit cleartext when the fingerprint scanner device transfers a fingerprint image to the driver. An attacker who sniffs an encrypted fingerprint image can easily decrypt that image using the key and salt.

• CWE-319

• https://github.com/sungjungk/fp-scanner-hackingExploit, Third Party Advisory
• https://www.youtube.com/watch?v=Grirez2xeasExploit, Third Party Advisory
• https://www.youtube.com/watch?v=wEXJDyEOatMExploit, Third Party Advisory
• https://github.com/sungjungk/fp-scanner-hackingExploit, Third Party Advisory
• https://www.youtube.com/watch?v=Grirez2xeasExploit, Third Party Advisory
• https://www.youtube.com/watch?v=wEXJDyEOatMExploit, Third Party Advisory

Published

Jun 13, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-12808ALTOOLS update service 18.1 and earlier versions contains a …7.8
• CVE-2019-12809Yes24ViewerX ActiveX Control 1.0.327.50126 and earlier versi…8.8
• CVE-2019-1281Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-12810A memory corruption vulnerability exists in the .PSD parsing…
• CVE-2019-12811ActiveX Control in MyBuilder before 6.2.2019.814 allow an at…9.8
• CVE-2019-12812MyBuilder viewer before 6.2.2019.814 allow an attacker to ex…9.8
• CVE-2019-12814A Polymorphic Typing issue was discovered in FasterXML jacks…5.9
• CVE-2019-12815An arbitrary file copy vulnerability in mod_copy in ProFTPD …9.8
• CVE-2019-12816Modules.cpp in ZNC before 1.7.4-rc1 allows remote authentica…
• CVE-2019-12817arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel b…7
• CVE-2019-12818An issue was discovered in the Linux kernel before 4.20.15. …
• CVE-2019-12819An issue was discovered in the Linux kernel before 5.0. The …