Samsung Pass (Samsung) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2022-09-09. Vendor: Samsung.

CVEs of Samsung Pass

• CVE-2022-36876 - CVSS 2.4 (low), 2022-09-09: Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without authentication.
• CVE-2022-36851 - CVSS 4.6 (medium), 2022-09-09: Improper access control vulnerability in Samsung pass prior to version 4.0.03.1 allow physical attackers to access data of Samsung pass on a certain state of…
• CVE-2022-30730 - CVSS 4.6 (medium), 2022-06-07: Improper authorization in Samsung Pass prior to 1.0.00.33 allows physical attackers to acess account list without authentication.
• CVE-2022-27841 - CVSS 4.3 (medium), 2022-04-11: Improper exception handling in Samsung Pass prior to version 3.7.07.5 allows physical attacker to view the screen that is previously running without…
• CVE-2021-25505 - CVSS 7.8 (high), 2021-11-05: Improper authentication in Samsung Pass prior to 3.0.02.4 allows to use app without authentication when lockscreen is unlocked.