Samsung Pay vulnerabilities

2 known vulnerabilities affecting samsung/pay.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1LOW1

Vulnerabilities

Page 1 of 1

CVE-2021-25525MEDIUMCVSS 6.5fixed in 4.0.652021-12-08

CVE-2021-25525 [MEDIUM] CWE-703 CVE-2021-25525: Improper check or handling of exception conditions vulnerability in Samsung Pay (US only) prior to v Improper check or handling of exception conditions vulnerability in Samsung Pay (US only) prior to version 4.0.65 allows attacker to use NFC without user recognition.

CVE-2021-25527LOWCVSS 3.3fixed in 4.1.772021-12-08

CVE-2021-25527 [LOW] CWE-926 CVE-2021-25527: Improper export of Android application components vulnerability in Samsung Pay (India only) prior to Improper export of Android application components vulnerability in Samsung Pay (India only) prior to version 4.1.77 allows attacker to access Bill Pay and Recharge menu without authentication.