Improper Exception Handling in Samsung Pass by Samsung
CVE-2022-27841

4.3MEDIUM

Key Information:

Vendor
Samsung
Status
Samsung Pass
Vendor
CVE Published:
11 April 2022

Summary

Samsung Pass contains a flaw due to improper exception handling, allowing a physical attacker to potentially access screens that were previously active without authentication. This vulnerability raises significant concerns about user data security and device protection.

Affected Version(s)

Samsung Pass - < 3.0.07.5

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...
x_refsource_MISC

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.