← Database

CVE-2022-36876

LOW CVSS: 1.8 Published: 2022-09-09 Modified: 2026-06-17

Description

Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without authentication.

Affected Platforms

Samsung Samsung Pass

Weakness Type

CWE-285, NVD-CWE-Other

References