CVE-2023-30675: 
Homebrew vulnerability analysis and mitigation

A vulnerability identified as CVE-2023-30675 was discovered in Samsung Pass versions prior to 4.2.03.1. The vulnerability was reported on April 23, 2023, and involves improper authentication that could allow local attackers to access stored account information specifically when Samsung Wallet is not installed (Samsung Mobile).

The vulnerability is classified as an improper authentication issue (CWE-287) with a CVSS v3.1 base score of 5.5 (MEDIUM) according to NVD assessment (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). Samsung Mobile's own assessment rated it slightly higher at 6.2 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (NVD).

The vulnerability allows local attackers to access stored account information in Samsung Pass when Samsung Wallet is not installed, potentially exposing sensitive user account data (Samsung Mobile).

Samsung has addressed this vulnerability by modifying the authentication logic in Samsung Pass version 4.2.03.1. Users are advised to update their Samsung Pass application to this version or later to protect against this security issue (Samsung Mobile).