EUVD-2017-18736

Malware in sbrugna...

Authentication flaw

The National Payments Corporation of India BHIM application 1.3 for Android relies on three hardcoded strings AK-NPCIMB, IM-NPCIBM, and VK-NPCIBM for SMS validation, which makes it easier for attackers to bypass authentication...

CVE-2017-9821

The National Payments Corporation of India BHIM application 1.3 for Android relies on three hardcoded strings AK-NPCIMB, IM-NPCIBM, and VK-NPCIBM for SMS validation, which makes it easier for attackers to bypass authentication...

CVE-2017-9821

The National Payments Corporation of India BHIM application 1.3 for Android relies on three hardcoded strings AK-NPCIMB, IM-NPCIBM, and VK-NPCIBM for SMS validation, which makes it easier for attackers to bypass authentication...

CVE-2017-9821

The National Payments Corporation of India BHIM application 1.3 for Android relies on three hardcoded strings AK-NPCIMB, IM-NPCIBM, and VK-NPCIBM for SMS validation, which makes it easier for attackers to bypass authentication...

CVE-2017-9821

The BHIM Android app (National Payments Corporation of India) v1.3 relies on three hardcoded strings (AK-NPCIMB, IM-NPCIBM, VK-NPCIBM) to validate OTP SMS, enabling authentication bypass. Public sources in connected documents confirm this vulnerability affecting BHIM Android 1.3 and outline the h...

CVE-2017-9821: Use of Hard-coded Credentials

The National Payments Corporation of India BHIM application 1.3 for Android relies on three hardcoded strings AK-NPCIMB, IM-NPCIBM, and VK-NPCIBM for SMS validation, which makes it easier for attackers to bypass authentication...