Samsung Mobile Samsung pass vunspecified - 6 CVEs

CVE-2022-39910

Improper access control vulnerability in Samsung Pass prior to version 4.0.06.7 allow physical attackers to access data of Samsung Pass on a certain state of an unlocked device using pop-up view.

LOW CVSS 3.9 Published Dec 08, 2022

CVE-2022-39911

Improper check or handling of exceptional conditions vulnerability in Samsung Pass prior to version 4.0.06.1 allows attacker to access Samsung Pass.

MEDIUM CVSS 4.8 Published Dec 08, 2022

CVE-2022-39892

Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep open feature.

LOW CVSS 3.6 Published Nov 09, 2022

CVE-2022-36851

Improper access control vulnerability in Samsung pass prior to version 4.0.03.1 allow physical attackers to access data of Samsung pass on a certain state of an unlocked device.

LOW CVSS 3.9 Published Sep 09, 2022

CVE-2022-36876

Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without authentication.

LOW CVSS 1.8 Published Sep 09, 2022

CVE-2022-30730

Improper authorization in Samsung Pass prior to 1.0.00.33 allows physical attackers to acess account list without authentication.

MEDIUM CVSS 4.6 Published Jun 07, 2022

Version unspecified