CVE-2023-40728
Assigner: siemens
Published: 2023-09-12T09:32:28.603Z
State: PUBLISHED
descriptions: value: A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application stores sensitive application data in an external insecure storage. This could allow an attacker to alter content, leading to arbitrary code execution or denial-of-service condition.
affected: vendor: Siemens
product: QMS Automotive
versions: version: All versions < V12.39
status: affected
defaultStatus: unknown
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
baseScore: 7.3
baseSeverity: HIGH
problemTypes: descriptions: cweId: CWE-922
description: CWE-922: Insecure Storage of Sensitive Information
type: CWE