VULNERABILITY INTELLIGENCE

CVE-2017-9819

CVSS score9.8 CRITICAL
EPSS probability2.13%
CISA KEVNot currently listed
Published2018-08-24
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The National Payments Corporation of India BHIM application 1.3 for Android does not properly restrict use of the OTP feature, which makes it easier for attackers to bypass authentication.

Weakness classification

  • CWE-287: Improper Authentication

Primary references