CVE-2023-40728: High severity siemens qms automotive vulnerability
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application stores sensitive application data in an external insecure storage. This could allow an attacker to alter content, leading to arbitrary code execution or denial-of-service condition.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-40728?
CVE-2023-40728 is a vulnerability identified in QMS Automotive (All versions < V12.39) where the QMS.Mobile module of the affected application stores sensitive application data in an external insecure storage.
What is the severity of CVE-2023-40728?
The severity of CVE-2023-40728 is high, with a severity value of 7.3.
How can an attacker exploit CVE-2023-40728?
An attacker can exploit CVE-2023-40728 by altering content in the external insecure storage, leading to arbitrary code execution or denial-of-service.
How can I fix CVE-2023-40728?
To fix CVE-2023-40728, update QMS Automotive to version V12.39 or higher to secure the storage of sensitive application data.
Where can I find more information about CVE-2023-40728?
You can find more information about CVE-2023-40728 in the official Siemens ProductCERT advisory: https://cert-portal.siemens.com/productcert/pdf/ssa-147266.pdf