Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2022-43958

A vulnerability has been identified in QMS Automotive (All versions < V12.39), QMS Automotive (All versions < V12.39). User credentials are stored in plaintext in the database without any hashing mechanism. This could allow an attacker to gain access to credentials and impersonate other users.

  • Published: Nov 8, 2022
  • Updated: May 9, 2024
  • CVE: CVE-2022-43958
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.6
  • AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

CWEs:

OWASP TOP 10:

Software From Fixed in
siemens / qms_automotive - -