Vulnerabilities > CVE-2023-42575 - Incorrect Authorization vulnerability in Samsung Pass 4.0.05.1/4.2.03.1

047910
CVSS 6.8 - MEDIUM
Attack vector
PHYSICAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
low complexity
samsung
CWE-863

Summary

Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid flag setting.

Vulnerable Configurations

Part Description Count
Application
Samsung
3

Common Weakness Enumeration (CWE)