Vulnerabilities > Samsung > Samsung Pass

DATE CVE VULNERABILITY TITLE RISK
2022-09-09 CVE-2022-36851 Unspecified vulnerability in Samsung Pass 3.0.02.4/3.7.07.5
Improper access control vulnerability in Samsung pass prior to version 4.0.03.1 allow physical attackers to access data of Samsung pass on a certain state of an unlocked device.
low complexity
samsung
4.6
2022-09-09 CVE-2022-36876 Unspecified vulnerability in Samsung Pass 3.0.02.4/3.7.07.5/4.0.03.1
Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without authentication.
low complexity
samsung
2.4
2022-06-07 CVE-2022-30730 Unspecified vulnerability in Samsung Pass
Improper authorization in Samsung Pass prior to 1.0.00.33 allows physical attackers to acess account list without authentication.
low complexity
samsung
4.6
2022-04-11 CVE-2022-27841 Improper Handling of Exceptional Conditions vulnerability in Samsung Pass 3.0.02.4
Improper exception handling in Samsung Pass prior to version 3.7.07.5 allows physical attacker to view the screen that is previously running without authentication
low complexity
samsung CWE-755
4.3
2021-11-05 CVE-2021-25505 Improper Authentication vulnerability in Samsung Pass
Improper authentication in Samsung Pass prior to 3.0.02.4 allows to use app without authentication when lockscreen is unlocked.
local
low complexity
samsung CWE-287
7.8