National Payments Corporation of India Bharat Interface For Money (BHIM) for Android
Approved changes feed: RSS · Atom
cpe:2.3:a:npci:bharat_interface_for_money_\(bhim\):1.3:*:*:*:*:android:*:*part: a version: 1.3 update: *
| Vendor | Npci (4365cbd4-17e7-5aca-a1fa-1fafb8dd3c44) |
|---|---|
| Product | Bharat Interface For Money (Bhim) (2496a1da-b87d-518d-9257-7d7ff8a202ba) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | android |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-9821 |
vulnerable | 2026-06-08 05:10:10.673245 |
Details available
The National Payments Corporation of India BHIM application 1.3 for Android relies on three hardcoded strings (AK-NPCIMB, IM-NPCIBM, and VK-NPCIBM) for SMS validation, which makes it easier for attackers to bypass authentication.
Published: 2018-08-24T21:00:00.000Z
Updated: 2024-08-05T17:18:01.914Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9820 |
vulnerable | 2026-06-08 05:10:10.672944 |
Details available
The National Payments Corporation of India BHIM application 1.3 for Android uses a custom keypad for which the input element is available to the Accessibility service, which makes it easier for attackers to bypass authentication.
Published: 2018-08-24T21:00:00.000Z
Updated: 2024-08-05T17:18:02.160Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9819 |
vulnerable | 2026-06-08 05:10:10.672630 |
Details available
The National Payments Corporation of India BHIM application 1.3 for Android does not properly restrict use of the OTP feature, which makes it easier for attackers to bypass authentication.
Published: 2018-08-24T21:00:00.000Z
Updated: 2024-08-05T17:18:02.236Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9818 |
vulnerable | 2026-06-08 05:10:10.672231 |
Details available
The National Payments Corporation of India BHIM application 1.3 for Android relies on a four-digit passcode, which makes it easier for attackers to obtain access.
Published: 2018-08-24T21:00:00.000Z
Updated: 2024-08-05T17:18:01.991Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.