---
id: 8319
title: "UPEK + Lenovo = Insecure Password Storage"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/network-pentesting/upek-lenovo-insecure-password-storage/"
published_at: "2012-10-09T00:00:00Z"
tags: ["password-storage", "registry", "lenovo", "upek", "fingerprint"]
phying_url: "https://phying.com/item/8319"
lang: en
---

# UPEK + Lenovo = Insecure Password Storage

## Summary

UPEK fingerprint readers, including Lenovo's ThinkVantage software, store Windows passwords weakly encrypted in the registry; a PoC tool decrypts them, and mitigation steps are shared.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2012-10-09T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/network-pentesting/upek-lenovo-insecure-password-storage/
- **Phying News:** https://phying.com/item/8319