Skip to main content

Pass CVE-2022-39911

MEDIUM
Improper Check or Handling of Exceptional Conditions (CWE-703)
2022-12-08 mobile.security@samsung.com
Information Disclosure Samsung Pass
6.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.8 MEDIUM
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Physical
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Dec 08, 2022 - 16:15 nvd
MEDIUM 6.8

DescriptionNVD

Improper check or handling of exceptional conditions vulnerability in Samsung Pass prior to version 4.0.06.1 allows attacker to access Samsung Pass.

AnalysisAI

Improper check or handling of exceptional conditions vulnerability in Samsung Pass prior to version 4.0.06.1 allows attacker to access Samsung Pass. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-703. Improper check or handling of exceptional conditions vulnerability in Samsung Pass prior to version 4.0.06.1 allows attacker to access Samsung Pass. Affected products include: Samsung Pass. Version information: version 4.0.06.1.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Pass

View all
CVE-2022-39892 CRITICAL
9.8 Nov 09

Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep op
CVE-2023-42576 MEDIUM
6.8 Dec 05

Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass aut
CVE-2023-42575 MEDIUM
6.8 Dec 05

Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass aut
CVE-2023-42554 MEDIUM
6.8 Nov 07

Improper Authentication vulnerabiity in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass auth
CVE-2023-30675 MEDIUM
5.5 Jul 06

Improper authentication in Samsung Pass prior to version 4.2.03.1 allows local attacker to access stored account informa
CVE-2024-49405 MEDIUM
4.6 Nov 06

Improper authentication in Private Info in Samsung Pass in prior to version 4.4.04.7 allows physical attackers to access
CVE-2023-30677 MEDIUM
4.6 Jul 06

Improper access control vulnerability in Samsung Pass prior to version 4.2.03.1 allows physical attackers to access data
CVE-2023-30676 MEDIUM
4.6 Jul 06

Improper access control vulnerability in Samsung Pass prior to version 4.2.03.1 allows physical attackers to access data
CVE-2022-39910 MEDIUM
4.2 Dec 08

Improper access control vulnerability in Samsung Pass prior to version 4.0.06.7 allow physical attackers to access data

Same weakness CWE-703 – Improper Check or Handling of Exceptional Conditions

View all
CVE-2019-5031 HIGH POC
8.8
CVE-2019-11245 HIGH POC
7.8
CVE-2025-59531 HIGH POC
7.5
CVE-2025-68135 MEDIUM POC
6.5
CVE-2023-0397 MEDIUM POC
6.5
CVE-2023-51443 MEDIUM POC
5.9
CVE-2023-49786 MEDIUM POC
5.9
CVE-2025-13026 CRITICAL
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2022-39911 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy