npci records

4 published records for vendor npci.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2017-9819No exploit	The National Payments Corporation of India BHIM application 1.3 for Android does not properly restrict use of the OTP feature, which makes inpci · bharat interface for money \(bhim\) · CWE-287 Pre-auth Auth bypass	Critical9.8	—	2.1%	Aug 24, 2018
40Plan	CVE-2017-9820No exploit	The National Payments Corporation of India BHIM application 1.3 for Android uses a custom keypad for which the input element is available tonpci · bharat interface for money \(bhim\) · CWE-287 Pre-auth Auth bypass	Critical9.8	—	1.8%	Aug 24, 2018
39Monitor	CVE-2017-9821No exploit	The National Payments Corporation of India BHIM application 1.3 for Android relies on three hardcoded strings (AK-NPCIMB, IM-NPCIBM, and VK-npci · bharat interface for money \(bhim\) · CWE-798 Pre-auth Auth bypass Hard-coded credentials	Critical9.8	—	1.4%	Aug 24, 2018
30Monitor	CVE-2017-9818No exploit	The National Payments Corporation of India BHIM application 1.3 for Android relies on a four-digit passcode, which makes it easier for attacnpci · bharat interface for money \(bhim\) · CWE-521 Pre-auth	High7.5	—	1.3%	Aug 24, 2018

CVE-2017-9819
40Plan
The National Payments Corporation of India BHIM application 1.3 for Android does not properly restrict use of the OTP feature, which makes i
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Auth bypass
npci · bharat interface for money \(bhim\)Aug 24, 2018
CVE-2017-9820
40Plan
The National Payments Corporation of India BHIM application 1.3 for Android uses a custom keypad for which the input element is available to
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Auth bypass
npci · bharat interface for money \(bhim\)Aug 24, 2018
CVE-2017-9821
39Monitor
The National Payments Corporation of India BHIM application 1.3 for Android relies on three hardcoded strings (AK-NPCIMB, IM-NPCIBM, and VK-
CriticalCVSS 9.8No exploitEPSS 1%
npci · bharat interface for money \(bhim\)Aug 24, 2018
CVE-2017-9818
30Monitor
The National Payments Corporation of India BHIM application 1.3 for Android relies on a four-digit passcode, which makes it easier for attac
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
npci · bharat interface for money \(bhim\)Aug 24, 2018