Headline
CVE-2023-40729
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application lacks security control to prevent unencrypted communication without HTTPS. An attacker who managed to gain machine-in-the-middle position could manipulate, or steal confidential information.
%PDF-1.5 %���� 46 0 obj << /Length 2726 /Filter /FlateDecode >> stream xڵZ�s�6�_���fb��$���v3�ʼnkɹ�}`I����’�}wP"%�eƽ�$H,���)���g?,���(i`�QL�� ��V*��!���" ~ �E��W���:���v3;�2,�on�"�Z� �(�C���7�nSe۴������ήg_�(0tπ$1�A�<���(���OAD�����rɉ ��`~��Y�j�=�(^,�4��1�ؑt��Ĉ8�*HB�� �_�S3�� D�$�MY�J�x�[�CB�a� 4@’t\ P�%�ݖM�.�c�cD�t�چ�A��D0=��_�1���R���癊�m��7� EY4E^ K$���H¹ �ᓌ��dfL�%�8�KR�1��V=�8N�S(pF��|f�l�|; �[�D36�o6ķQD�?O +��1CE�� ġmS-���:�����5��� &i_0��B3)�����䃀j����B�…��S��d`.z����e� �D�9D���M���$Qi��ʥ�����A"т�,b�<2�!u�N)1R�� ��qs ֙�0E�f��v��W~�癎�|S��0[PMA ��<��I_`��I�� ���D�d��>i�f��"R 8@�h�1�P��7������~&��\�@� S�ӫK�����/�!��0c"��8�w�e����}Z���p�]��E v�ľ�ja���l_4�I�&�ն��`R�� j����צIR��?gԀ�<��]�����x@ � �X�� �L��j�k��ʼ!������M��#�qԬ�Ӳ��?�~�2O2w��a�’�")�Ǐ�Z�h�Z�y��*+p���� (Ğ��a�:��&���� w� �����e����pZ-a���K�%ݎ5�~��Wmd:�6��ɠ�d��Ѡ��0>!(�p� `.~���rq}5P�1C "&� &�8P�A��t�X�1�$�>�w�� .����U"@6�YH0A�GE�y� ���P= ��g�[v�8N�c � ������q�gK����!� .m��u’P���ѐ@�7��GH��h��G���_ l�����^�:��� �3� m o���}�:��H2 ������)��ŭ���`�9<��Ϙ�0���d��g&&����>�фr�Z��Hx��F�ڳ�e�#q�j�������c�:�}% p]����D�rB�8Vd,�������<����G�up�M���(ˣ|�S⿽� ���OH�&h��֑Z `q��3����xm 6�w5 ����r�O��Э��gOd�4鳻-�^mծ/@<��~�ql5�e�j��- ��i���ʄ�M���϶��R���5r+��9 ߯�#F��.&^GÕBB @�1!{r1��*}�_[K���� ��j ��0q��PP��x � %�*� 2XRP���x�W:��{\�H��>۷7���3�XV�z4��oYT���F��7=��yZ�E,mi�6,$�]���>�i��˵ڹn[�m�l�_�J���B 3L{�P����GKf��M�j}���U��s( ���vM`�+/��o�