CVE-2022-39910

Samsung Pass is affected by an improper access control flaw in versions prior to 4.0.06.7. The issue enables a physical attacker to access Samsung Pass data on an unlocked device via a pop-up view. Affected component: Samsung Pass (pre-4.0.06.7). Root cause: insufficient access restrictions permi...

CVE-2022-39911

CVE-2022-39911 affects Samsung Pass prior to 4.0.06.1. The issue is an improper check/handling of exceptional conditions in Samsung Pass, enabling access to Samsung Pass. Documents from multiple sources confirm the affected software and version range (pre-4.0.06.1) and indicate a remediation path...

CVE-2022-39892

CVE-2022-39892 refers to an improper access control issue in Samsung Pass prior to version 4.0.05.1, allowing unauthenticated access via the keep-open feature. Affected product: Samsung Pass (Samsung mobile biometrics login flow). Root cause: insufficient access checks on the keep-open path. Impa...

CVE-2024-49405

CVE-2024-49405 corresponds to an improper authentication issue in Samsung Pass Private Info on Samsung mobile devices, prior to version 4.4.04.7. In a specific scenario, a physical attacker could access sensitive information due to weak/authentication gaps. Affected software is Samsung Pass (Priv...

CVE-2023-42554

CVE-2023-42554 affects Samsung Pass, with vulnerable versions prior to 4.3.00.17. The issue is an improper authentication mechanism that allows a physical attacker to bypass authentication. Public risk details are supported by multiple connected sources indicating the same affected product and ve...

CVE-2023-42576

The CVE-2023-42576 entry affects Samsung Pass on devices running versions prior to 4.3.00.17. The vulnerability arises from an invalid exception handler that enables a physical attacker to bypass authentication. Documents consistently describe impact to confidentiality, integrity, and availabilit...

CVE-2023-30677

CVE-2023-30677 affects Samsung Pass: an improper access control vulnerability allows a physical attacker to access Samsung Pass data when the device is in a specific unlocked state. Affected versions are prior to 4.2.03.1. Root cause: insufficient access controls on Samsung Pass data. Impact is d...

CVE-2023-30675

CVE-2023-30675 affects Samsung Pass, where improper authentication before version 4.2.03.1 allows a local attacker to access stored account information if Samsung Wallet is not installed. Affected software: Samsung Pass (on devices), with the root cause described as improper authentication. Impac...

CVE-2023-30676

CVE-2023-30676 affects Samsung Pass prior to 4.2.03.1. The issue is an improper access control vulnerability that could allow a physical attacker to access Samsung Pass data. The CVSS vector indicates Physical attack Vector, Low attack complexity, No privileges required, and Confidentiality impac...

CVE-2023-42575

Samsung Pass on mobile devices is impacted by CVE-2023-42575, affecting versions prior to 4.3.00.17. The issue is an improper authentication flaw caused by an invalid flag setting that allows physical attackers with direct device access to bypass authentication. Remediation requires updating to v...