Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

TI-2023-22726 CVE-2023-42576 · GHSA-vw28-3j9w-9mch

Improper authentication in Samsung Pass

Priority LOW 32

Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid exception handler.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.0038 Published 2023-12-05 Fixed in 4.3.00.17 CWE-287
TI-2023-22725 CVE-2023-42575 · GHSA-xf3p-q42r-rwgf

Incorrect authorization in Samsung Pass

Priority LOW 32

Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid flag setting.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.0038 Published 2023-12-05 Fixed in 4.3.00.17 CWE-863
TI-2023-22704 CVE-2023-42554 · GHSA-v5h3-wx8w-wpmx

Improper authentication in Samsung Pass

Priority LOW 32

Improper Authentication vulnerabiity in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00386 Published 2023-11-07 Fixed in 4.3.00.17 CWE-287
TI-2023-14489 CVE-2023-30675 · GHSA-vgxr-5gfw-xp36

Improper authentication in Samsung Pass

Priority LOW 27

Improper authentication in Samsung Pass prior to version 4.2.03.1 allows local attacker to access stored account information when Samsung Wallet is not installed.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00162 Published 2023-07-06 Fixed in 4.2.03.1 CWE-287
TI-2022-18904 CVE-2022-39910 · GHSA-jj68-3qxc-xvjv

Improper access control in Samsung Pass

Priority LOW 19

Improper access control vulnerability in Samsung Pass prior to version 4.0.06.7 allow physical attackers to access data of Samsung Pass on a certain state of an unlocked device using pop-up view.

CVSS 3.1MEDIUM 4.2 Physical No auth No interaction EPSS 0.00272 Published 2022-12-08 Fixed in 4.0.06.7 CWE-284
TI-2022-18886 CVE-2022-39892 · GHSA-94xf-rr59-hc9c

Improper authentication in Samsung Pass

Priority MEDIUM 43

Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep open feature.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00476 Published 2022-11-09 Fixed in 4.0.05.1 CWE-287