CVE-2023-42575: 
Homebrew vulnerability analysis and mitigation

Improper Authentication vulnerability was discovered in Samsung Pass prior to version 4.3.00.17. The vulnerability was assigned CVE-2023-42575 and was disclosed in December 2023. The vulnerability affects Samsung Pass application and allows physical attackers to bypass authentication due to invalid flag setting (Samsung Advisory).

The vulnerability is classified as Moderate severity with a CVSS v3.1 Base Score of 5.4 MEDIUM (Vector: CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N). The issue stems from an invalid flag setting in the authentication mechanism of Samsung Pass, which could be exploited by physical attackers to bypass the authentication controls (NVD).

If successfully exploited, this vulnerability allows physical attackers to bypass authentication mechanisms in Samsung Pass. This could potentially lead to unauthorized access to sensitive information stored within the Samsung Pass application (Samsung Advisory).

Samsung has addressed this vulnerability by adding proper authentication logic in Samsung Pass version 4.3.00.17. Users are advised to update their Samsung Pass application to this version or later to protect against potential exploitation (Samsung Advisory).