CVE-2023-40724

Summary

CVE-2023-40724 is a newly discovered vulnerability affecting QMS Automotive software versions below V12.39. This issue allows an attacker to gain unauthorized access by exploiting the presence of user credentials in plaintext form in the system memory. By conducting a memory dump, an adversary can obtain these sensitive credentials and utilize them for impersonation purposes. This vulnerability poses a significant risk to security and necessitates immediate remediation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.