Authentication flaw

2023-12-0503:15:00

PRIOn knowledge base

www.prio-n.com

samsung pass

authentication flaw

version 4.3.00.17

physical attackers

invalid exception handler

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

21.5%

JSON

Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid exception handler.

CPENameOperatorVersion
passlt4.3.00.17

CPE	Name	Operator	Version
	pass	lt	4.3.00.17

References

security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12