1.8
Low
CVE-2022-36876 Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access…
Description
Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without authentication.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Samsung Pass 4.0 | earliest → < 4.0.04.10 | 4.0.04.10 |
Other CVEs of Samsung Pass
The 16 CVEs of Samsung Pass →
CVE-2026-21057
Improper input validation in Samsung Pass prior to version 5.2.10.3 allows local privileged attackers to write…
6.8
Medium
CVE-2024-49405
Improper authentication in Private Info in Samsung Pass in prior to version 4.4.04.7 allows physical attackers to access…
5.3
Medium
CVE-2023-42576
Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass…
5.4
Medium
CVE-2023-42575
Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass…
5.4
Medium