SSA-147266: Multiple Vulnerabilities in QMS Automotive before V12.39
QMS Automotive before V12.39 contains multiple vulnerabilities that could allow an attacker to perform malicious code injection, information disclosure or lead to a denial of service condition. Siemens has released an update for QMS Automotive and recommends to update to the latest version.
beschreibt (10)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-40732US | low3.9 | — | ||
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application does not invalidate the session token on logout. Th… | ||||
| CVE-2023-40731US | high8.8 | — | ||
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application allows users to upload arbitrary file types. This could allow an attacker to… | ||||
| CVE-2023-40730US | high8.8 | — | ||
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application lacks sufficient authorization checks. This could a… | ||||
| CVE-2023-40729US | high7.4OT erhöht | — | ||
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application lacks security control to prevent unencrypted communication without HTTPS. A… | ||||
| CVE-2023-40728US | high7.8 | — | ||
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application stores sensitive application data in an external in… | ||||
| CVE-2023-40727US | — | — | ||
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application uses weak outdated application signing mechanism. T… | ||||
| CVE-2023-40726US | high8.8 | — | ||
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application server responds with sensitive information about the server. This could allo… | ||||
| CVE-2023-40725US | — | — | ||
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application returns inconsistent error messages in response to invalid user credentials… | ||||
| CVE-2023-40724US | — | — | ||
A vulnerability has been identified in QMS Automotive (All versions < V12.39). User credentials are found in memory as plaintext. An attacker could perform a memory dump, and get a… | ||||
| CVE-2022-43958US | —OT erhöht | — | ||
A vulnerability has been identified in QMS Automotive (All versions < V12.39), QMS Automotive (All versions < V12.39). User credentials are stored in plaintext in the database with… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-147266: Multiple Vulnerabilities in QMS Automotive before V12.39 - CSAF Versionself
- SSA-147266: Multiple Vulnerabilities in QMS Automotive before V12.39 - HTML Versionself
- SSA-147266: Multiple Vulnerabilities in QMS Automotive before V12.39 - PDF Versionself
- SSA-147266: Multiple Vulnerabilities in QMS Automotive before V12.39 - TXT Versionself
Behebungen (10)
- BehobenQMS Automotive
Update to V12.39 or later version. The patch is available upon request from customer support
- BehobenQMS Automotive
Update to V12.39 or later version. The patch is available upon request from customer support
- BehobenQMS Automotive
Update to V12.39 or later version. The patch is available upon request from customer support
- BehobenQMS Automotive
Update to V12.39 or later version. The patch is available upon request from customer support
- BehobenQMS Automotive
Update to V12.39 or later version. The patch is available upon request from customer support
- BehobenQMS Automotive
Update to V12.39 or later version. The patch is available upon request from customer support
- BehobenQMS Automotive
Update to V12.39 or later version. The patch is available upon request from customer support
- BehobenQMS Automotive
Update to V12.39 or later version. The patch is available upon request from customer support
- BehobenQMS Automotive
Update to V12.39 or later version. The patch is available upon request from customer support
- BehobenQMS Automotive
Update to V12.39 or later version. The patch is available upon request from customer support
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan