Read the docs
TI-2021-06256 Aliases CVE-2021-23908GHSA-r57j-hvj5-9m8v

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on…

Priority MEDIUM 47CWE-843Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-843 and the CVSS impact.

Summary

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. A type confusion issue affects MultiSvSetAttributes in the HiQnet Protocol, leading to remote code execution.

Why it matters now

EPSS 0.02362 83rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 8

CPEVersionsRoleVendor
cpe:2.3:a:mercedes-benz:headunit_ntg6_mercedes-benz_user_experience:2021:*:*:*:*:*:*:*2021VulnerableMercedes-benz
cpe:2.3:h:mercedes-benz:a_220:-:*:*:*:*:*:*:*not specified by NVDRunning onMercedes-benz
cpe:2.3:h:mercedes-benz:a_220_4matic:-:*:*:*:*:*:*:*not specified by NVDRunning onMercedes-benz
cpe:2.3:h:mercedes-benz:e_350:-:*:*:*:*:*:*:*not specified by NVDRunning onMercedes-benz
cpe:2.3:h:mercedes-benz:e_350_4matic:-:*:*:*:*:*:*:*not specified by NVDRunning onMercedes-benz
cpe:2.3:h:mercedes-benz:eqc:-:*:*:*:*:*:*:*not specified by NVDRunning onMercedes-benz
cpe:2.3:h:mercedes-benz:gle_350:-:*:*:*:*:*:*:*not specified by NVDRunning onMercedes-benz
cpe:2.3:h:mercedes-benz:gle_350_4matic:-:*:*:*:*:*:*:*not specified by NVDRunning onMercedes-benz
  • cpe:2.3:a:mercedes-benz:headunit_ntg6_mercedes-benz_user_experience:2021:*:*:*:*:*:*:* Versions 2021 Vulnerable ·Mercedes-benz
  • cpe:2.3:h:mercedes-benz:a_220:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mercedes-benz
  • cpe:2.3:h:mercedes-benz:a_220_4matic:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mercedes-benz
  • cpe:2.3:h:mercedes-benz:e_350:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mercedes-benz
  • cpe:2.3:h:mercedes-benz:e_350_4matic:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mercedes-benz
  • cpe:2.3:h:mercedes-benz:eqc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mercedes-benz
  • cpe:2.3:h:mercedes-benz:gle_350:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mercedes-benz
  • cpe:2.3:h:mercedes-benz:gle_350_4matic:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mercedes-benz

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-23908
  2. 2026-10-03 Alias added: GHSA-r57j-hvj5-9m8v

References

Exploit 1

Advisory 2

  • TI-2023-17228 Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over… CVSS 3.1CRITICAL 9.8
  • TI-2021-06255 An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on… CVSS 3.1CRITICAL 9.8
  • TI-2023-17229 Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over… CVSS 3.1HIGH 7.5
  • TI-2023-17227 Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over… CVSS 3.1HIGH 7.5
  • TI-2023-17226 Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings… CVSS 3.1HIGH 7.5
  • TI-2023-17231 Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over… CVSS 3.1HIGH 7.7
See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences