ICS Advisory: Siemans QMS Automotive

Summary:

The document provides information on a series of vulnerabilities found in Siemens' QMS Automotive products. The vulnerabilities include plaintext storage of passwords, cleartext storage of sensitive information, generation of error messages containing sensitive information, and others. Successful exploitation of these vulnerabilities could allow an attacker to perform malicious code injection, information disclosure, or lead to a denial-of-service condition.

The affected products are QMS Automotive, all versions prior to v12.39. Siemens has identified specific workarounds and mitigations, including updating to the latest version (v12.39 or later) and implementing general security measures such as protecting network access and configuring the environment according to Siemens' industrial security guidelines.

CISA recommends minimizing network exposure, locating control systems behind firewalls, and using secure remote access methods. The agency also provides guidance on control systems security recommended practices and encourages organizations to implement proactive defense strategies.