Samsung Samsung Pass — known CVE vulnerabilities

Every CVE whose affected-product data names Samsung Samsung Pass, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2022-30730 — CVSS 4.6 (medium): Improper authorization in Samsung Pass prior to 1.0.00.33 allows physical attackers to acess account list without authentication.
• CVE-2022-27841 — CVSS 4.3 (medium): Improper exception handling in Samsung Pass prior to version 3.7.07.5 allows physical attacker to view the screen that is previously…
• CVE-2022-36851 — CVSS 3.9 (low): Improper access control vulnerability in Samsung pass prior to version 4.0.03.1 allow physical attackers to access data of Samsung pass on…
• CVE-2021-25505 — CVSS 3.3 (low): Improper authentication in Samsung Pass prior to 3.0.02.4 allows to use app without authentication when lockscreen is unlocked.
• CVE-2022-36876 — CVSS 1.8 (low): Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without…