Plaintext Credential Exposure in QMS Automotive by Siemens

CVE-2023-40724

Summary

A vulnerability has been detected in QMS Automotive, where user credentials are stored in memory without encryption. This security flaw allows an attacker to perform a memory dump, thereby gaining access to sensitive user credentials stored in plaintext. The compromised information could enable unauthorized access and impersonation, posing a significant risk to users and systems relying on QMS Automotive for their operations.

References