Siemans QMS Automotive
QMS Automotive before V12.39 contains multiple vulnerabilities that could allow an attacker to perform malicious code injection, information disclosure or lead to a denial of service condition. Siemens has released an update for QMS Automotive and recommends to update to the latest version.
describes (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-40732US | low3.9 | — | ||
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application does not invalidate the session token on logout. Th… | ||||
| CVE-2023-40731US | high8.8 | — | ||
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application allows users to upload arbitrary file types. This could allow an attacker to… | ||||
| CVE-2023-40730US | high8.8 | — | ||
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application lacks sufficient authorization checks. This could a… | ||||
| CVE-2023-40729US | high7.4OT elevated | — | ||
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application lacks security control to prevent unencrypted communication without HTTPS. A… | ||||
| CVE-2023-40728US | high7.8 | — | ||
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application stores sensitive application data in an external in… | ||||
| CVE-2023-40727US | — | — | ||
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application uses weak outdated application signing mechanism. T… | ||||
| CVE-2023-40726US | high8.8 | — | ||
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application server responds with sensitive information about the server. This could allo… | ||||
| CVE-2023-40725US | — | — | ||
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application returns inconsistent error messages in response to invalid user credentials… | ||||
| CVE-2023-40724US | — | — | ||
A vulnerability has been identified in QMS Automotive (All versions < V12.39). User credentials are found in memory as plaintext. An attacker could perform a memory dump, and get a… | ||||
| CVE-2022-43958US | —OT elevated | — | ||
A vulnerability has been identified in QMS Automotive (All versions < V12.39), QMS Automotive (All versions < V12.39). User credentials are stored in plaintext in the database with… | ||||
references
External citations — patches, advisories, analysis.
- SSA-147266: Multiple Vulnerabilities in QMS Automotive before V12.39 - CSAF Versionself
- SSA-147266: Multiple Vulnerabilities in QMS Automotive before V12.39 - HTML Versionself
- SSA-147266: Multiple Vulnerabilities in QMS Automotive before V12.39 - PDF Versionself
- SSA-147266: Multiple Vulnerabilities in QMS Automotive before V12.39 - TXT Versionself
- ICS Advisory ICSA-23-257-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-257-03 - Web Versionself
- Recommended Practicesexternal
remediations (10)
- FixedQMS Automotive
Update to V12.39 or later version. The patch is available upon request from customer support
- FixedQMS Automotive
Update to V12.39 or later version. The patch is available upon request from customer support
- FixedQMS Automotive
Update to V12.39 or later version. The patch is available upon request from customer support
- FixedQMS Automotive
Update to V12.39 or later version. The patch is available upon request from customer support
- FixedQMS Automotive
Update to V12.39 or later version. The patch is available upon request from customer support
- FixedQMS Automotive
Update to V12.39 or later version. The patch is available upon request from customer support
- FixedQMS Automotive
Update to V12.39 or later version. The patch is available upon request from customer support
- FixedQMS Automotive
Update to V12.39 or later version. The patch is available upon request from customer support
- FixedQMS Automotive
Update to V12.39 or later version. The patch is available upon request from customer support
- FixedQMS Automotive
Update to V12.39 or later version. The patch is available upon request from customer support
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan