Priority MEDIUM 61
Mercedes-Benz XENTRY Retail Data Storage 7.8.1 allows remote attackers to cause a denial of service (device restart) via an unauthenticated API request.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.2644 · Published 2023-01-15 · No fix listed CWE-400
Priority MEDIUM 50
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00834 · Published 2025-02-13 · No fix listed CWE-190
Priority MEDIUM 47
An issue was discovered in HERMES 2.1 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02361 · Published 2021-05-13 · No fix listed CWE-787
Priority MEDIUM 47
An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02362 · Published 2021-05-13 · No fix listed CWE-843
Priority MEDIUM 47
An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02362 · Published 2021-05-13 · No fix listed
Priority MEDIUM 46
An issue was discovered in HERMES 2.1 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0174 · Published 2021-05-13 · No fix listed CWE-787
Priority MEDIUM 40
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00676 · Published 2025-02-13 · No fix listed CWE-476
Priority MEDIUM 40
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00676 · Published 2025-02-13 · No fix listed CWE-476
Priority MEDIUM 40
Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00636 · Published 2025-02-13 · No fix listed CWE-400
Priority LOW 36
An issue was discovered in the Daimler Mercedes-Benz Me app 2.11.0-846 for iOS.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01409 · Published 2018-10-09 · No fix listed CWE-319
Priority LOW 33
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB.
CVSS 3.1HIGH 7.7· Local · No auth · No interaction · EPSS 0.00223 · Published 2025-02-13 · No fix listed CWE-787
Priority LOW 32
An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6 through 2021.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00352 · Published 2025-02-13 · No fix listed CWE-121
Priority LOW 32
An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00804 · Published 2021-05-13 · No fix listed CWE-20
Priority LOW 31
An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the maintenance orders of other users and access sensitive user information via unspecified vectors.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.005 · Published 2023-11-22 · No fix listed CWE-200
Priority LOW 31
An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the carts of other users via sending a crafted add order request.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.005 · Published 2023-11-22 · No fix listed CWE-200
Priority LOW 29
An issue was discovered in Daimler Mercedes-Benz COMAND 17/13.0 50.12 on Mercedes-Benz C-Class 2018 vehicles.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01054 · Published 2018-10-09 · No fix listed CWE-835
Priority LOW 25
Mercedes-Benz head-unit NTG6 has Ethernet pins on Base Board to connect module CSB.
CVSS 3.1MEDIUM 4.9· Adjacent network · Low privileges · User interaction · EPSS 0.00444 · Published 2025-02-13 · No fix listed CWE-284
Priority LOW 22
Mercedes-Benz head-unit NTG6 has Ethernet pins on Base Board to connect module CSB.
CVSS 3.1MEDIUM 4.9· Adjacent network · Low privileges · User interaction · EPSS 0.00232 · Published 2025-02-13 · No fix listed CWE-284
Priority LOW 21
An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6.
CVSS 3.1MEDIUM 4.6· Physical · No auth · No interaction · EPSS 0.00333 · Published 2025-02-13 · No fix listed CWE-843
Priority LOW 21
An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6 through 2021.
CVSS 3.1MEDIUM 4.6· Physical · No auth · No interaction · EPSS 0.00342 · Published 2025-02-13 · No fix listed CWE-476
Priority LOW 21
An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6.
CVSS 3.1MEDIUM 4.6· Physical · No auth · No interaction · EPSS 0.00338 · Published 2025-02-13 · No fix listed CWE-122
Priority LOW 18
On Mercedes-Benz C Class AMG Premium Plus c220 BlueTec vehicles, the Bluetooth stack mishandles %x and %c format-string specifiers in a device name in the COMAND infotainment software.
CVSS 3.1LOW 3.5· Adjacent network · No auth · User interaction · EPSS 0.00759 · Published 2020-08-27 · No fix listed CWE-134
Priority LOW 17
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB.
CVSS 3.1LOW 3.7· Network · Low privileges · User interaction · EPSS 0.00286 · Published 2025-02-13 · No fix listed CWE-125
Priority LOW 15
An issue was discovered on Mercedes Benz NTG 6.
CVSS 3.1LOW 3.3· Local · No auth · User interaction · EPSS 0.00222 · Published 2025-02-13 · No fix listed CWE-190
THREATIST.IORead the docs