CVE-2022-43958: Siemens Qms Automotive

High severity, CVSS 7.6. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability has been identified in QMS Automotive (All versions < V12.39), QMS Automotive (All versions < V12.39). User credentials are stored in plaintext in the database without any hashing mechanism. This could allow an attacker to gain access to credentials and impersonate other users.

Affected products

• Siemens Qms Automotive: any version

Published 2022-11-08. Last modified 2026-06-17.