1. Home
  2. CVE Database
  3. CVE-2022-36876
LOW · 1.8

CVE-2022-36876

Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without authentication.

Vulnerability Description

Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without authentication.

CVSS Score

1.8

LOW

CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
SamsungSamsung Pass< 4.0.04.10

Related Weaknesses (CWE)

CWE-285

References

FAQ

What is CVE-2022-36876?

CVE-2022-36876 is a vulnerability with a CVSS score of 1.8 (LOW). Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without authentication.

How severe is CVE-2022-36876?

CVE-2022-36876 has been rated LOW with a CVSS base score of 1.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-36876?

Check the references section above for vendor advisories and patch information. Affected products include: Samsung Samsung Pass.