The fault "could allow an unauthorised person access to a secure area without a user first touching their hand to the device".