4.0
Medium
CVE-2023-40725 A vulnerability has been identified in QMS Automotive (All versions < V12.39)
Description
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application returns inconsistent error messages in response to invalid user credentials during login session. This allows an attacker to enumerate usernames, and identify valid usernames.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| QMS Automotive | Versions not published |
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of QMS Automotive
The 11 CVEs of QMS Automotive →
CVE-2023-40732
A vulnerability has been identified in QMS Automotive (All versions < V12.39)
3.9
Low
CVE-2023-40731
A vulnerability has been identified in QMS Automotive (All versions < V12.39)
5.7
Medium
CVE-2023-40730
A vulnerability has been identified in QMS Automotive (All versions < V12.39)
7.1
High
CVE-2023-40729
A vulnerability has been identified in QMS Automotive (All versions < V12.39)
7.3
High