Insecure Storage Vulnerability in QMS Automotive by Siemens

CVE-2023-40728

What is CVE-2023-40728?

A vulnerability has been discovered in the QMS.Mobile module of QMS Automotive, where sensitive application data is stored in an external insecure storage location. This flaw could potentially allow an unauthorized attacker to manipulate application content, resulting in arbitrary code execution or potentially leading to a denial-of-service condition. Users are advised to upgrade to a secure version to mitigate these risks.

References