Lucene search
HistorySep 09, 2022 - 3:15 p.m.
CVE-2022-36876
samsung pass
upi payment
improper authorization
physical attackers
account list
authentication
CVSS3
2.4
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
18.0%
Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without authentication.
Affected configurations
Node
samsungsamsung_passRange<4.0.04.10android
| Vendor | Product | Version | CPE |
|---|---|---|---|
| samsung | samsung_pass | * | cpe:2.3:a:samsung:samsung_pass:*:*:*:*:*:android:*:* |
Related
cve
cve
CVE-2022-36876
2022-09-09 15:15:13
prion
prion
Authorization
2022-09-09 15:15:00
cvelist
cvelist
CVE-2022-36876
2022-09-09 14:39:58
CVSS3
2.4
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
18.0%
Related for NVD:CVE-2022-36876