CVE-2022-30730

MediumCVSS 4.6/10Last modified Jun 17, 2026

Description

Improper authorization in Samsung Pass prior to 1.0.00.33 allows physical attackers to acess account list without authentication.

Metrics

CVSS 3.1 4.6/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-285

Affected software

VendorProductVersions
Samsung MobileSamsung Pass>= unspecified, < 4.0.00.33

References

Timeline

Published
Jun 7, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-307315.5Improper access control vulnerability in My Files prior to version 13.1.00.193 allows attackers to access arbitrary private files in My FileCVE-2022-307327.5Exposure of Sensitive Information vulnerability in Samsung Account prior to version 13.2.00.6 allows attacker to access sensitive informatioCVE-2022-307335.3Sensitive information exposure in Sign-in log in Samsung Account prior to version 13.2.00.6 allows attackers to get an user email or phone nCVE-2022-307345.3Sensitive information exposure in Sign-out log in Samsung Account prior to version 13.2.00.6 allows attackers to get an user email or phone CVE-2022-307357.5Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the access_token without permissioCVE-2022-307365.3Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the data of contact and gallery wiCVE-2022-307375.3Implicit Intent hijacking vulnerability in Samsung Account prior to version 13.2.00.6 allows attackers to get email ID.CVE-2022-307384.3Improper check in Loader in Samsung Internet prior to 17.0.1.69 allows attackers to spoof address bar via executing script.CVE-2022-307394.3Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get an user email or phone number withCVE-2022-30744.8The Slider Hero WordPress plugin before 8.4.4 does not escape the slider Name, which could allow high-privileged users to perform Cross-SiteCVE-2022-307404.3Improper auto-fill algorithm in Samsung Internet prior to version 17.0.1.69 allows physical attackers to guess stored credit card numbers.CVE-2022-307413.3Sensitive information exposure vulnerability in SimChangeAlertManger of Find My Mobile prior to 7.2.24.12 allows local attackers with log ac
CVE-2022-30730: Medium severity, CVSS 4.6 | Vulnix