SSA-587547: Unencrypted Storage of User Credentials in QMS Automotive
QMS Automotive contains a vulnerability that stores user credentials in plantext within the user database. This could allow an attacker to read credentials from memory. Siemens has released an update for QMS Automotive and recommends to update to the latest version.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-43958US | —OT erhöht | — | ||
A vulnerability has been identified in QMS Automotive (All versions < V12.39), QMS Automotive (All versions < V12.39). User credentials are stored in plaintext in the database with… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-587547: Unencrypted Storage of User Credentials in QMS Automotive - CSAF Versionself
- SSA-587547: Unencrypted Storage of User Credentials in QMS Automotive - HTML Versionself
- SSA-587547: Unencrypted Storage of User Credentials in QMS Automotive - PDF Versionself
- SSA-587547: Unencrypted Storage of User Credentials in QMS Automotive - TXT Versionself
Behebungen (2)
- MitigationQMS Automotive
Enable encryption for user passwords. See user manual under ‘Administration’ for further details
- BehobenQMS Automotive
Update to V12.39 or later version. The patch is available upon request from customer support
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan