Vulnerabilities > CVE-2023-40728 - Insecure Storage of Sensitive Information vulnerability in Siemens QMS Automotive 12.30
Attack vector
LOCAL Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application stores sensitive application data in an external insecure storage. This could allow an attacker to alter content, leading to arbitrary code execution or denial-of-service condition.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |