Browse CVEs

MEDIUM 6.8 CVE-2024-37600 An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6 through 2021. A possible stack buffer overflow in the Service Broker servi… Headunit Ntg6 Mercedes Benz User Experience after 2021 Fix from $1,6002025-02-13 HIGH 7.7 CVE-2023-34402 Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside file is encapsulate another file, which service… Headunit Ntg6 Mercedes Benz User Experience after 2021 Fix from $1,9502025-02-13 CRITICAL 9.8 CVE-2023-34399 Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive accor… Headunit Ntg6 Mercedes Benz User Experience after 2021 Fix from $2,3002025-02-13 HIGH 7.5 CVE-2023-34397 Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB. During parsing you can trigger that the service will … Headunit Ntg6 Mercedes Benz User Experience after 2021 Fix from $1,9502025-02-13 HIGH 7.5 CVE-2023-34398 Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive accor… Headunit Ntg6 Mercedes Benz User Experience after 2021 Fix from $1,9502025-02-13 HIGH 7.5 CVE-2023-34400 Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. In case of parsing file, service try to define header … Headunit Ntg6 Mercedes Benz User Experience after 2021 Fix from $1,9502025-02-13 MEDIUM 5.3 CVE-2023-47392 An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the carts of other users via sending a crafted add order re… Mercedes Me after 1.34.0 Fix from $1,6002023-11-22 MEDIUM 5.3 CVE-2023-47393 An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the maintenance orders of other users and access sensitive … Mercedes Me after 1.34.0 Fix from $1,6002023-11-22 HIGH 7.5 CVE-2023-23590EPSS 26% Mercedes-Benz XENTRY Retail Data Storage 7.8.1 allows remote attackers to cause a denial of service (device restart) via an unauthenticated API reque… Xentry Retail Data Storage Firmware Mitigation only Fix from $1,9502023-01-15 CRITICAL 9.8 CVE-2021-23907 An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. The count in MultiSvGet, GetAttr… Headunit Ntg6 Mercedes Benz User Experience No fix yet Fix from $2,3002021-05-13 CRITICAL 9.8 CVE-2021-23908 An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. A type confusion issue affects M… Headunit Ntg6 Mercedes Benz User Experience No fix yet Fix from $2,3002021-05-13 CRITICAL 9.8 CVE-2021-23909 An issue was discovered in HERMES 2.1 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. The SH2 MCU allows remote code executio… Hermes No fix yet Fix from $2,3002021-05-13 CRITICAL 9.8 CVE-2021-23910 An issue was discovered in HERMES 2.1 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. There is an out-of-bounds array access … Hermes No fix yet Fix from $2,3002021-05-13 MEDIUM 6.8 CVE-2021-23906 An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. A Message Length is not checked … Mercedes Benz User Experience after 2021 Fix from $1,6002021-05-13 HIGH 7.5 CVE-2018-18071 An issue was discovered in the Daimler Mercedes-Benz Me app 2.11.0-846 for iOS. The encrypted Connected Vehicle API data exchange between the app and… Mercedes Me No fix yet Fix from $1,9502018-10-09 MEDIUM 5.9 CVE-2018-18070 An issue was discovered in Daimler Mercedes-Benz COMAND 17/13.0 50.12 on Mercedes-Benz C-Class 2018 vehicles. Defining or receiving a specific naviga… Comand Mitigation only Fix from $1,6002018-10-09