CVE-2023-42575: Samsung Pass

Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid flag setting.

Affected products

• Samsung Pass: before 4.3.00.17 (fixed in 4.3.00.17)

Published 2023-12-05. Last modified 2026-06-17.