CVE-2021-25525

Improper check or handling of exception conditions vulnerability in Samsung Pay (US only) prior to version 4.0.65 allows attacker to use NFC without user recognition.

Score

CVSS 3.1 6.5 Medium

Status

Modified - mobile.security@samsung.com

Published

2021-12-08

Last modified

2024-08-03

Weaknesses

CWE-703, CWE-754

Affected products

• Pay (Samsung)
• Samsung Pay (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=12