Priority LOW 35
The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows local attacks involving the USB or OBD-II interf…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00644 · Published 2018-05-31 · No fix listed CWE-693
Priority LOW 35
The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows a local attack when a USB device is plugged in.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0062 · Published 2018-05-31 · No fix listed CWE-693
Priority MEDIUM 49
The Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW vehicles produced in 2012 through 2018, allows a remote attack via a cellular network.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04158 · Published 2018-05-31 · No fix listed CWE-693
Priority LOW 31
The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows an attack by an attacker who has direct physical…
CVSS 3.0MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00691 · Published 2018-05-31 · No fix listed CWE-693
Priority LOW 27
The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows a remote attack via Bluetooth when in pairing mo…
CVSS 3.0MEDIUM 5.3· Adjacent network · No auth · No interaction · EPSS 0.01222 · Published 2018-05-31 · No fix listed CWE-693
Priority LOW 35
The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows a local attack when a USB device is plugged in.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00625 · Published 2018-05-31 · No fix listed CWE-693
Priority MEDIUM 49
The Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW vehicles produced in 2012 through 2018, allows a remote attack via a cellular network.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03864 · Published 2018-05-31 · No fix listed CWE-693