Samsung Pay Mini vulnerabilities

3 CVEs affecting Samsung Pay Mini, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-25333, published 2021-03-04.

More from Samsung.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-25333, published 2021-03-04. Low severity, CVSS 2.4. EPSS: 0.3% chance of exploitation in the next 30 days. Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to balance information over the lockscreen via scanning specific QR code.
• CVE-2021-25332, published 2021-03-04. Low severity, CVSS 2.4. EPSS: 0.3% chance of exploitation in the next 30 days. Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to contacts information over the lockscreen in specific condition.
• CVE-2021-25331, published 2021-03-04. Low severity, CVSS 2.4. EPSS: 0.3% chance of exploitation in the next 30 days. Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to balance information over the lockscreen in specific condition.