CVE-2023-40728 | BDVDB-2026-211804 Detail
SiemensQMS Automotive
Description#
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application stores sensitive application data in an external insecure storage. This could allow an attacker to alter content, leading to arbitrary code execution or denial-of-service condition.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact low. Attack vector: local.
Weaknesses#
- CWE-922 Insecure Storage of Sensitive Information
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.