CVE-2023-40728

CVSS V2 None CVSS V3 None

Description

A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application stores sensitive application data in an external insecure storage. This could allow an attacker to alter content, leading to arbitrary code execution or denial-of-service condition.

Overview

CVE ID
CVE-2023-40728

Assigner
siemens

Vulnerability Status
PUBLISHED

Published Version
2023-09-12T09:32:28.603Z

Last Modified Date
2023-09-12T09:32:28.603Z

Weakness Enumerations

CWE	URL
CWE-922	http://cwe.mitre.org/data/definitions/922.html

References

Reference URL	Reference Tags
https://cert-portal.siemens.com/productcert/pdf/ssa-147266.pdf

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-40728
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40728

History

Created	Old Value	New Value	Data Type	Notes
2024-06-25 02:31:59				Added to TrackCVE