User Credential Storage Vulnerability in QMS Automotive by Siemens

CVE-2022-43958

What is CVE-2022-43958?

A significant security issue has been found in QMS Automotive across all versions prior to V12.39, where user credentials are stored in plaintext within the database. This lack of hashing poses a severe risk, as attackers could exploit this vulnerability to retrieve and misuse stored credentials, potentially leading to user impersonation and unauthorized access to sensitive information.

References