HIGH🇵🇱 Wersja polska

CVE-2023-40728

CVSS 7.3v3.1pub. 2023-09-12upd. 2024-11-21

A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application stores sensitive application data in an external insecure storage. This could allow an attacker to alter content, leading to arbitrary code execution or denial-of-service condition.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L

  • Siemens Qms Automotive

    APP
    Siemens
    < 12.39
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2021-27389CRITICAL9.8PL ✓same product

Siemens Opcenter Quality / QMS Automotive — ujawniony prywatny klucz podpisu

CVE-2023-40724HIGH7.3same product

A vulnerability has been identified in QMS Automotive (All versions < V12.39). User credentials are found in m...

CVE-2023-40727HIGH7.8same product

A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the af...

CVE-2023-40726HIGH8.8same product

A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application server...

CVE-2023-40729HIGH7.3same product

A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application lacks ...