[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fzWwnOeuSTPTXybZtjsaEigo1hOukGrfxh94fYj3gx4E":3,"g5a-risk:CVE-2023-42576":105},{"success":4,"data":5,"meta":102},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":48,"weaknesses":55,"weaknessesCount":48,"isActivelyExploited":64,"cisaInfo":27,"otxData":27,"relatedBlogPosts":65,"seoMetadata":66,"configurations":91,"relatedVendorCves":100,"notableEvents":101},"CVE-2023-42576","What is CVE-2023-42576?","Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid exception handler.","Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid exception ...","2023-12-05T03:15:18.45","2023-12-11T15:42:44.137",6.8,"CVSS:3.1\u002FAV:P\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","PHYSICAL","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,0.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":37,"ImpactScore":38},"mobile.security@samsung.com","Secondary",{"Version":20,"VectorString":34,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":25,"UserInteraction":35,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"CVSS:3.1\u002FAV:P\u002FAC:L\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N","REQUIRED",5.4,0.2,5.2,0.0038,[39,39,39,39,39,39,39],"Medium",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"samsung","pass","*","cpe:2.3:a:samsung:pass:*:*:*:*:*:*:*:*",1,[50],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fsecurity.samsungmobile.com\u002FserviceWeb.smsb?year=2023&month=12","Samsungmobile",[54],"Vendor Advisory",[56],{"id":57,"name":58,"description":59,"extendedDescription":60,"status":61,"abstraction":62,"structure":63},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",false,[],{"title":67,"metaDescription":68,"keywords":69,"canonicalUrl":70,"structuredData":71},"What is CVE-2023-42576? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2023-42576, a medium severity cyber security vulnerability from 2023. Improper Authentication vulnerability in Samsung Pass pri...","CVE-2023-42576, CVE-2023-42576 vulnerability, CVE-2023-42576 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, samsung security, pass vulnerability","\u002Fwhat-is\u002Fcve-2023-42576",{"@context":72,"@type":73,"headline":67,"description":68,"datePublished":10,"dateModified":11,"author":74,"publisher":78,"about":82,"mainEntityOfPage":86,"articleSection":89,"keywords":90},"https:\u002F\u002Fschema.org","TechArticle",{"@type":75,"name":76,"url":77},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":75,"name":76,"url":77,"logo":79},{"@type":80,"url":81},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":83,"name":6,"description":84,"additionalType":85},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":87,"@id":88},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2023-42576","Cybersecurity","CVE-2023-42576, CVE-2023-42576 vulnerability, CVE-2023-42576 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[92],{"Operator":27,"Negate":27,"Nodes":93},[94],{"Operator":95,"Negate":27,"CPEMatch":96},"OR",[97],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":98,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":99,"VersionEndIncluding":27},"BAF62AE3-EC39-4BED-B961-BFD630286633","4.3.00.17",[],[],{"lastModified":11,"cacheTime":103,"version":104},1793225458569,"2.0",{"score":106,"band":107,"action":108,"scoredAt":109},23,"Low","Monitor","2026-10-28T06:59:35.674525+00:00"]