Priority LOW 24
Improper authentication in Private Info in Samsung Pass in prior to version 4.4.04.7 allows physical attackers to access sensitive information in a specific scenario.
CVSS 3.1MEDIUM 5.3· Physical · No auth · No interaction · EPSS 0.00233 · Published 2024-11-06 · Fixed in 4.4.04.7
Priority LOW 32
Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid exception handler.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.0038 · Published 2023-12-05 · Fixed in 4.3.00.17 CWE-287
Priority LOW 32
Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid flag setting.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.0038 · Published 2023-12-05 · Fixed in 4.3.00.17 CWE-863
Priority LOW 32
Improper Authentication vulnerabiity in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00386 · Published 2023-11-07 · Fixed in 4.3.00.17 CWE-287
Priority LOW 29
Improper access control vulnerability in Samsung Pass prior to version 4.2.03.1 allows physical attackers to access data of Samsung Pass on a certain state of an unlocked device.
CVSS 3.1MEDIUM 6.1· Physical · No auth · No interaction · EPSS 0.0025 · Published 2023-07-06 · Fixed in 4.2.03.1
Priority LOW 21
Improper access control vulnerability in Samsung Pass prior to version 4.2.03.1 allows physical attackers to access data of Samsung Pass.
CVSS 3.1MEDIUM 4.6· Physical · No auth · No interaction · EPSS 0.0025 · Published 2023-07-06 · Fixed in 4.2.03.1
Priority LOW 27
Improper authentication in Samsung Pass prior to version 4.2.03.1 allows local attacker to access stored account information when Samsung Wallet is not installed.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00162 · Published 2023-07-06 · Fixed in 4.2.03.1 CWE-287
Priority LOW 30
Improper check or handling of exceptional conditions vulnerability in Samsung Pass prior to version 4.0.06.1 allows attacker to access Samsung Pass.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00255 · Published 2022-12-08 · Fixed in 4.0.06.1 CWE-703
Priority LOW 19
Improper access control vulnerability in Samsung Pass prior to version 4.0.06.7 allow physical attackers to access data of Samsung Pass on a certain state of an unlocked device using pop-up view.
CVSS 3.1MEDIUM 4.2· Physical · No auth · No interaction · EPSS 0.00272 · Published 2022-12-08 · Fixed in 4.0.06.7 CWE-284
Priority MEDIUM 43
Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep open feature.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00476 · Published 2022-11-09 · Fixed in 4.0.05.1 CWE-287