CVE Catalog

CVE-2023-21435

MediumCVSS 4.4
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.18%

8th percentile - higher than 8% of all known CVEs

Summary

Exposure of Sensitive Information vulnerability in Fingerprint TA prior to SMR Feb-2023 Release 1 allows attackers to access memory address information via logs.

Risk Assessment

Exposure of memory address information may help an attacker develop further exploits, such as code execution. The risk affects devices using Fingerprint TA.

Recommendation

Install the SMR Feb-2023 Release 1 update or later. Also restrict access to system logs.

Other vulnerabilities in Fingerprint TA

Original NVD description (English source)

Exposure of Sensitive Information vulnerability in Fingerprint TA prior to SMR Feb-2023 Release 1 allows attackers to access the memory address information via log.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS