CVE-2017-9820 The National Payments Corporation of India BHIM application 1.3 for Android uses a custom keypad for which the input element is available to the Accessibility service, which makes it easier for attack...
CriticalCVSS 9.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The National Payments Corporation of India BHIM application 1.3 for Android uses a custom keypad for which the input element is available to the Accessibility service, which makes it easier for attackers to bypass authentication.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| npci bharat interface for money bhim | = 1.3 | No fix listed |
References
- github.com broken-link
- exchange.xforce.ibmcloud.com third-party-advisory