Impact of threats for misappropriated cards 2
U4. (S2/S4) replacement of fingerprint image – realisable if:
U3 (interception of fingerprint) realisable before misappropriation of card.
Attacker can create cardholder fingerprint image from fingerprint, say, from a glass.
High risk if both U4 & U3 realisable.
Medium risk if only U4 realisable.