User Credential Storage Vulnerability in QMS Automotive by Siemens
CVE-2022-43958
7.6HIGH
Summary
A significant security issue has been found in QMS Automotive across all versions prior to V12.39, where user credentials are stored in plaintext within the database. This lack of hashing poses a severe risk, as attackers could exploit this vulnerability to retrieve and misuse stored credentials, potentially leading to user impersonation and unauthorized access to sensitive information.
Affected Version(s)
QMS Automotive All versions < V12.39
QMS Automotive All versions < V12.39
References
CVSS V3.1
Score:
7.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved