CVE-2023-22382 Improper Input Validation in Automotive

Weak configuration in Automotive while VM is processing a listener request from TEE...

CVE-2023-22382

CVE-2023-22382 concerns a weak configuration in the Automotive stack when a VM processes a listener request from a Trusted Execution Environment (TEE). Documents indicate the issue lies in the Automotive VM/TEE interaction with a broad impact, including high confidentiality, integrity, and availa...

Qualcomm Chip Resource Management Error Vulnerability

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc. and are often manufactured on the surface of semiconductor wafers. The Qualcomm chip suffers from a resource management error vulnerability that...

Qualcomm Chip Security Breach

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc. and are often manufactured on the surface of semiconductor wafers. The Qualcomm chip has a security vulnerability that stems from a weak...

PT-2023-18474 · Unknown · Automotive

Name of the Vulnerable Software and Affected Versions: Automotive affected versions not specified Description: The issue is related to a weak configuration in Automotive while the Virtual Machine VM is processing a listener request from the Trusted Execution Environment TEE. Recommendations: At t...

PT-2023-24155 · Unknown · Automotive Display

Name of the Vulnerable Software and Affected Versions: Automotive Display affected versions not specified Description: The issue is related to memory corruption in the Automotive Display when the image handle created using the connected display driver is destroyed. Recommendations: At the moment,...

Android Automotive OS Update Bulletin—October 2023Stay organized with collectionsSave and categorize content based on your preferences.

The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2023-10-05 or later from the October 2023 Android Security Bulletin in addition to all issues in thi...

The vulnerability of the software for quality management systems in the automotive industry, related to the transmission of data in an open format, allows a attacker to perform a “Man-in-the-Middle” attack.

The vulnerability of quality management software for automobile manufacturers is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a remote attacker to carry out a Middleware-In-The-Middle MITM attack...

The vulnerability of the QMS.Mobile module of the quality management software for automobile manufacturers allows a perpetrator to execute arbitrary code or trigger service failures.

The vulnerability of the QMS.Mobile module of the quality management software for automobile manufacturers, QMS Automotive, is related to deficiencies in data storage. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

The vulnerability of the software for quality management systems in the automotive industry allows attackers to load unlimited amounts of malicious files, enabling them to execute arbitrary code.

The vulnerability of the quality management software for automobile manufacturers, QMS Automotive, is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by loading a specially crafted file...

The vulnerability of the quality management software for automobile manufacturers, QMS Automotive, arises from the unencrypted storage of critical information, allowing a hacker to expose user credentials.

The vulnerability of the quality management software for automobile manufacturers, QMS Automotive, is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow a malicious actor to obtain user credentials...

Siemens QMS Automotive Data Forgery Issue Vulnerability

Siemens QMS Automotive is a quality management system for the automotive industry from Siemens, Germany. A data forgery vulnerability exists in Siemens QMS Automotive, which stems from the affected application's QMS.Mobile module using a weak and outdated application signing mechanism. An attacke...

Unspecified Vulnerability in Siemens QMS Automotive

Siemens QMS Automotive is a quality management system for the automotive industry from Siemens, Germany. A security vulnerability exists in Siemens QMS Automotive version V12.39, which stems from a lack of security controls in the affected application to prevent unencrypted communication without...

Siemens QMS Automotive Code Issue Vulnerability (CNVD-2023-71216)

Siemens QMS Automotive is a quality management system for the automotive industry from Siemens, Germany. A code issue vulnerability exists in Siemens QMS Automotive, which stems from the affected application's QMS.Mobile module not invalidating session tokens upon logout. An attacker could exploi...

Siemens QMS Automotive Code Issue Vulnerability

Siemens QMS Automotive is a quality management system for the automotive industry from Siemens, Germany. Siemens QMS Automotive has a code issue vulnerability that can be exploited by an attacker to upload malicious files, which could lead to code tampering...

Siemens QMS Automotive Security Bypass Vulnerability

Siemens QMS Automotive is a quality management system for the automotive industry from Siemens, Germany. A security bypass vulnerability exists in Siemens QMS Automotive, which stems from the affected application's QMS.Mobile module storing sensitive application data in external, unsecured storag...

Siemens QMS Automotive Information Disclosure Vulnerability (CNVD-2023-71222)

Siemens QMS Automotive is a quality management system for the automotive industry from Siemens, Germany. Siemens QMS Automotive has an information disclosure hole that can be exploited by an attacker to gain direct access to the database...

Siemens QMS Automotive Information Disclosure Vulnerability (CNVD-2023-71223)

Siemens QMS Automotive is a quality management system for the automotive industry from Siemens, Germany. Siemens QMS Automotive has an information disclosure hole that can be exploited by an attacker to enumerate usernames and identify valid usernames...

Siemens QMS Automotive Access Control Error Vulnerability

Siemens QMS Automotive is a quality management system for the automotive industry from Siemens, Germany. Siemens QMS Automotive suffers from an Access Control Error vulnerability that stems from a lack of sufficient authorization checks in the QMS.Mobile module of the affected application. An...

Siemens QMS Automotive Information Leakage Hole

Siemens QMS Automotive is a quality management system for the automotive industry from Siemens, Germany. Siemens QMS Automotive has an information disclosure hole that can be exploited by an attacker to perform a memory dump, gain access to credentials, and use them in a simulation...