PT-2023-28445 · Samsung · Samsung Pass
CVE-2023-42575
·
Publicado
2023-12-04
·
Atualizado
2023-12-11
CVSS v3.1
6.8
Média
| Vetor | AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Samsung Pass versions prior to 4.3.00.17
Description
The issue allows physical attackers to bypass authentication due to invalid flag setting. This is related to an Improper Authentication vulnerability.
Recommendations
For versions prior to 4.3.00.17, update to version 4.3.00.17 or later to resolve the issue. As a temporary workaround, consider restricting physical access to devices until the update can be applied.
Correção
Incorrect Authorization
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Samsung Pass