Posted on Tuesday, January 30 2018 @ 12:38 CET by Thomas De Maesschalck
Lenovo messed up as the Fingerprint Manager Pro software that's found on the company's ThinkPad, ThinkStation and ThinkCentre systems contains several serious security vulnerabilities. The flaws can give unauthorized users access to Windows logon credentials and fingerprint reader data. Users
are advised to upgrade to the latest version of the tool.
If your system isn't Think-branded, you're safe. Otherwise, you'll need to pay attention to this disclosure and patch your system, though there's a caveat. If you're running a fully-updated Windows 10, your system isn't vulnerable. Microsoft built fingerprint reader support into Windows 10, so Lenovo's Fingerprint Manager Pro software shouldn't be running on your system. The full list of vulnerable systems follows:
ThinkPad L560
ThinkPad P40 Yoga, P50s
ThinkPad T440, T440p, T440s, T450, T450s, T460, T540p, T550, T560
ThinkPad W540, W541, W550s
ThinkPad X1 Carbon (Type 20A7, 20A8), X1 Carbon (Type 20BS, 20BT)
ThinkPad X240, X240s, X250, X260
ThinkPad Yoga 14 (20FY), Yoga 460
ThinkCentre M73, M73z, M78, M79, M83, M93, M93p, M93z
ThinkStation E32, P300, P500, P700, P900
Via: The Tech Report
