Mercedes-benz

Records24All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

Mercedes-benz records in CISA KEV

No Mercedes-benz vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Headunit Ntg6 Mercedes-benz User Experience 15 records MEDIUM Mercedes Me 3 records LOW Comand 2 records LOW Hermes 2 records MEDIUM Mercedes-benz User Experience 1 record LOW Xentry Retail Data Storage Firmware 1 record MEDIUM

Records

3 records in Mercedes Me · all components

TI-2018-12844 CVE-2018-18071 · GHSA-v39m-fc2p-hp53

An issue was discovered in the Daimler Mercedes-Benz Me app 2.11.0-846 for iOS.

LOW 36

An issue was discovered in the Daimler Mercedes-Benz Me app 2.11.0-846 for iOS.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01409 Published 2018-10-09 No fix listed CWE-319

TI-2023-25640 CVE-2023-47393 · GHSA-x9cp-rmp2-c7h2

An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view…

LOW 31

An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the maintenance orders of other users and access sensitive user information via unspecified vectors.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.005 Published 2023-11-22 No fix listed CWE-200

TI-2023-25639 CVE-2023-47392 · GHSA-j97j-gq6f-fjfg

An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view…

LOW 31

An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the carts of other users via sending a crafted add order request.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.005 Published 2023-11-22 No fix listed CWE-200

Open these records in search →

Critical	5
High	6
Medium	10
Low	3
No CVSS	0