CVE-2023-40724 | BDVDB-2026-211800 Detail
SiemensQMS Automotive
Description#
A vulnerability has been identified in QMS Automotive (All versions < V12.39). User credentials are found in memory as plaintext. An attacker could perform a memory dump, and get access to credentials, and use it for impersonation.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact low. Attack vector: local.
Weaknesses#
- CWE-316 Cleartext Storage of Sensitive Information in Memory
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.