low1.8
CVE-2022-36876
Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without authentication.
Impact
Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Samsung | Samsung Pass | before 4.0.04.10 |