{"id":"CVE-2023-40730","aliases":["EUVD-2023-45284","GHSA-xqm9-2mv3-cvx4"],"status":"published","title":"A vulnerability has been identified in QMS Automotive (All versions \u003c V12.39). The QMS.Mobile...","description":"A vulnerability has been identified in QMS Automotive (All versions \u003c V12.39). The QMS.Mobile module of the affected application lacks sufficient authorization checks. This could allow an attacker to access confidential information, perform administrative functions, or lead to a denial-of-service condition.","severity":{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:P/RL:O/RC:C","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00571,"percentile":0.47684,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284"],"published":"2023-09-12T09:32:30Z","modified":"2026-06-17T06:19:17Z","products":[{"vendor":"siemens","product":"qms automotive"},{"vendor":"siemens","product":"qms_automotive"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-147266.pdf","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40730"},{"url":"https://github.com/advisories/GHSA-xqm9-2mv3-cvx4"}],"sources":{"cve":[{"id":"CVE-2023-40730","description":"A vulnerability has been identified in QMS Automotive (All versions \u003c V12.39). The QMS.Mobile module of the affected application lacks sufficient authorization checks. This could allow an attacker to access confidential information, perform administrative functions, or lead to a denial-of-service condition.","status":"published","published":"2023-09-12T09:32:30.722Z","modified":"2025-02-27T20:55:33.063Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:P/RL:O/RC:C","level":"high","assessor":"cna"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:35:21.971258Z"}],"euvd":[{"id":"EUVD-2023-45284","description":"A vulnerability has been identified in QMS Automotive (All versions \u003c V12.39). The QMS.Mobile module of the affected application lacks sufficient authorization checks. This could allow an attacker to access confidential information, perform administrative functions, or lead to a denial-of-service condition.","status":"published","published":"2023-09-12T09:32:30Z","modified":"2025-02-27T20:55:33Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:P/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-02T20:53:21.01879Z"}],"ghsa":[{"id":"GHSA-xqm9-2mv3-cvx4","title":"A vulnerability has been identified in QMS Automotive (All versions \u003c V12.39). The QMS.Mobile...","description":"A vulnerability has been identified in QMS Automotive (All versions \u003c V12.39). The QMS.Mobile module of the affected application lacks sufficient authorization checks. This could allow an attacker to access confidential information, perform administrative functions, or lead to a denial-of-service condition.","status":"published","published":"2023-09-14T18:32:40Z","modified":"2024-04-04T07:40:38Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:56:53.773376Z"}],"nvd":[{"id":"CVE-2023-40730","description":"A vulnerability has been identified in QMS Automotive (All versions \u003c V12.39). The QMS.Mobile module of the affected application lacks sufficient authorization checks. This could allow an attacker to access confidential information, perform administrative functions, or lead to a denial-of-service condition.","status":"published","published":"2023-09-12T10:15:29.403Z","modified":"2026-06-17T06:19:17.617Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","level":"high","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:08:28.268644Z"}]}}