CVE-2023-42554

Improper Authentication vulnerabiity in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication.
Configurations

Configuration 1 (hide)

cpe:2.3:a:samsung:pass:*:*:*:*:*:*:*:*

History

15 Nov 2023, 13:38

Type Values Removed Values Added
CWE CWE-287
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.8
CPE cpe:2.3:a:samsung:pass:*:*:*:*:*:*:*:*
References () https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=11 - () https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=11 - Vendor Advisory
First Time Samsung pass
Samsung

07 Nov 2023, 12:14

Type Values Removed Values Added
New CVE

Information

Published : 2023-11-07 08:15

Updated : 2024-02-28 20:33


NVD link : CVE-2023-42554

Mitre link : CVE-2023-42554

CVE.ORG link : CVE-2023-42554


JSON object : View

Products Affected

samsung

  • pass
CWE
CWE-287

Improper Authentication