CVE-2017-9819

Affected software: National Payments Corporation of India BHIM Android app, version 1.3. Vulnerability: OTP feature is not properly restricted, enabling authentication bypass. Root cause (as stated): improper restriction of OTP functionality. Impact: attackers could bypass authentication (per the...

CVE-2017-9821

The BHIM Android app (National Payments Corporation of India) v1.3 relies on three hardcoded strings (AK-NPCIMB, IM-NPCIBM, VK-NPCIBM) to validate OTP SMS, enabling authentication bypass. Public sources in connected documents confirm this vulnerability affecting BHIM Android 1.3 and outline the h...

CVE-2017-9821

The National Payments Corporation of India BHIM application 1.3 for Android relies on three hardcoded strings AK-NPCIMB, IM-NPCIBM, and VK-NPCIBM for SMS validation, which makes it easier for attackers to bypass authentication...

CVE-2017-9818

The National Payments Corporation of India BHIM application 1.3 for Android relies on a four-digit passcode, which makes it easier for attackers to obtain access...

CVE-2017-9820

The CVE-2017-9820 entry concerns the National Payments Corporation of India BHIM Android app (v1.3). A vulnerability exists where the app’s custom keypad exposes the input element to the Accessibility service, enabling bypass of authentication. This is described with a CVSS-3.0 base score of 9.8 ...

BHIM App — How to Send & Receive Money with UPI

After the lack of supply of cash in India following its Prime Minister step to remove high-denomination banknotes from circulation in November 2016, the country is moving a step closer towards becoming a cashless economy with the launch of Unified Payment Interface UPI. Unified Payment Interface...