Improper Authentication in Samsung Pass Affects Security Measures
CVE-2023-42554

6.8MEDIUM

Key Information:

Vendor

Samsung
Status
Samsung Pass
Vendor
CVE Published:
7 November 2023

What is CVE-2023-42554?

An improper authentication vulnerability exists in Samsung Pass, allowing physical attackers to bypass the authentication mechanism. This flaw affects versions of the software prior to 4.3.00.17, potentially exposing user data and increasing the risk of unauthorized access. It emphasizes the importance of updating to the latest version to mitigate security risks.

Affected Version(s)

Samsung Pass 4.3.00.17

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.