CVE-2023-30675: Samsung Pass

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper authentication in Samsung Pass prior to version 4.2.03.1 allows local attacker to access stored account information when Samsung Wallet is not installed.

Affected products

• Samsung Pass: before 4.2.03.1 (fixed in 4.2.03.1)

Published 2023-07-06. Last modified 2026-06-17.