Samsung Pass vulnerabilities

10 vulnerabilities

Known vulnerabilities in Samsung Pass, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2022-39892samsung mobilesamsung pass+1
EPSS score
0.43%
Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep open feature.
4.2CVE-2022-39910samsung mobilesamsung pass+1
EPSS score
0.27%
Improper access control vulnerability in Samsung Pass prior to version 4.0.06.7 allow physical attackers to access data of Samsung Pass on a certain state of an unlocked device using pop-up view.
6.8CVE-2022-39911samsung mobilesamsung pass+1
EPSS score
0.26%
Improper check or handling of exceptional conditions vulnerability in Samsung Pass prior to version 4.0.06.1 allows attacker to access Samsung Pass.
5.3CVE-2024-49405samsungpass
EPSS score
0.23%
Improper authentication in Private Info in Samsung Pass in prior to version 4.4.04.7 allows physical attackers to access sensitive information in a specific scenario.
6.8CVE-2023-42576samsungpass
EPSS score
0.38%
Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid exception handler.
6.8CVE-2023-42554samsungpass
EPSS score
0.34%
Improper Authentication vulnerabiity in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication.
6.8CVE-2023-42575samsungpass
EPSS score
0.38%
Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid flag setting.
4.6CVE-2023-30676samsungpass
EPSS score
0.25%
Improper access control vulnerability in Samsung Pass prior to version 4.2.03.1 allows physical attackers to access data of Samsung Pass.
6.1CVE-2023-30677samsungpass
EPSS score
0.25%
Improper access control vulnerability in Samsung Pass prior to version 4.2.03.1 allows physical attackers to access data of Samsung Pass on a certain state of an unlocked device.
6.2CVE-2023-30675samsungpass
EPSS score
0.16%
Improper authentication in Samsung Pass prior to version 4.2.03.1 allows local attacker to access stored account information when Samsung Wallet is not installed.