1. Home
  2. CVE Database
  3. CVE-2023-42575
MEDIUM · 5.4

CVE-2023-42575

Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid flag setting.

Vulnerability Description

Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid flag setting.

CVSS Score

5.4

MEDIUM

CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
SamsungPass< 4.3.00.17

Related Weaknesses (CWE)

CWE-863

References

FAQ

What is CVE-2023-42575?

CVE-2023-42575 is a vulnerability with a CVSS score of 5.4 (MEDIUM). Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid flag setting.

How severe is CVE-2023-42575?

CVE-2023-42575 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-42575?

Check the references section above for vendor advisories and patch information. Affected products include: Samsung Pass.