Siemens QMS Automotive
view advisory published 2022-11-08
QMS Automotive contains a vulnerability that stores user credentials in plantext within the user database. This could allow an attacker to read credentials from memory. Siemens has released an update for QMS Automotive and recommends to update to the latest version.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-43958US | —OT elevated | — | ||
A vulnerability has been identified in QMS Automotive (All versions < V12.39), QMS Automotive (All versions < V12.39). User credentials are stored in plaintext in the database with… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-587547: Unencrypted Storage of User Credentials in QMS Automotive - CSAF Versionself
- SSA-587547: Unencrypted Storage of User Credentials in QMS Automotive - HTML Versionself
- SSA-587547: Unencrypted Storage of User Credentials in QMS Automotive - PDF Versionself
- SSA-587547: Unencrypted Storage of User Credentials in QMS Automotive - TXT Versionself
- ICS Advisory ICSA-22-314-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-314-06 - Web Versionself
- Recommended Practicesexternal
03
remediations (2)
- MitigationQMS Automotive
Enable encryption for user passwords. See user manual under ‘Administration’ for further details
- FixedQMS Automotive
Update to V12.39 or later version. The patch is available upon request from customer support
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan