Weak Application Signing Mechanism in QMS Automotive by Siemens
CVE-2023-40727
7.8HIGH
What is CVE-2023-40727?
A security flaw has been discovered in the QMS Automotive application, specifically in the QMS.Mobile module, which utilizes a dated application signing mechanism. This weakness can potentially be exploited by attackers to modify the application code, posing a significant risk to the integrity of the software. It is critical that users of versions prior to V12.39 take immediate action to address this vulnerability to safeguard their systems.
Affected Version(s)
QMS Automotive All versions < V12.39
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved