Lenovo Fingerprint Manager vulnerabilities

2 CVEs affecting Lenovo Fingerprint Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-3321, published 2017-10-03.

More from Lenovo.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-3321, published 2017-10-03. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. Services and files in Lenovo Fingerprint Manager before 8.01.42 have incorrect ACLs, which allows local users to invalidate local checks and gain privileges via standard filesystem operations.
• CVE-2016-2393, published 2016-04-11. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Lenovo Fingerprint Manager before 8.01.57 and Touch Fingerprint before 1.00.08 use weak ACLs for unspecified (1) services and (2) files, which allows local users to gain privileges by invalidating…