EUVD-2017-18736

Malware in sbrugna...

EUVD-2017-18733

Malware in sbrugna...

EUVD-2017-18734

Malware in sbrugna...

Authentication flaw

The National Payments Corporation of India BHIM application 1.3 for Android relies on three hardcoded strings AK-NPCIMB, IM-NPCIBM, and VK-NPCIBM for SMS validation, which makes it easier for attackers to bypass authentication...

CVE-2017-9818

The National Payments Corporation of India BHIM application 1.3 for Android relies on a four-digit passcode, which makes it easier for attackers to obtain access...

CVE-2017-9819

The National Payments Corporation of India BHIM application 1.3 for Android does not properly restrict use of the OTP feature, which makes it easier for attackers to bypass authentication...

CVE-2017-9820

The National Payments Corporation of India BHIM application 1.3 for Android uses a custom keypad for which the input element is available to the Accessibility service, which makes it easier for attackers to bypass authentication...

CVE-2017-9818

CVE-2017-9818 affects the National Payments Corporation of India BHIM Android app (version 1.3). The issue is that the app relies on a four-digit passcode, which the available documents describe as enabling easier access for attackers. The connected documents confirm the component and root cause ...

CVE-2017-9821: Use of Hard-coded Credentials

The National Payments Corporation of India BHIM application 1.3 for Android relies on three hardcoded strings AK-NPCIMB, IM-NPCIBM, and VK-NPCIBM for SMS validation, which makes it easier for attackers to bypass authentication...

CVE-2017-9820: Improper Authentication

The National Payments Corporation of India BHIM application 1.3 for Android uses a custom keypad for which the input element is available to the Accessibility service, which makes it easier for attackers to bypass authentication...