Vulnerabilities

Filters

1 selected

24 records

Sort

Vendor: Mercedes-benz Clear all filters

TI-2024-25078 CVE-2024-37603 · GHSA-37rg-82p6-6g3x

An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6.

LOW 21

An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00333 Published 2025-02-13 No fix listed CWE-843

TI-2024-25077 CVE-2024-37602 · GHSA-j98w-mw3j-r2fc

An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6 through 2021.

LOW 21

An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6 through 2021.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00342 Published 2025-02-13 No fix listed CWE-476

TI-2024-25076 CVE-2024-37601 · GHSA-vjxw-jj99-5xw3

An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6.

LOW 21

An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00338 Published 2025-02-13 No fix listed CWE-122

TI-2024-25075 CVE-2024-37600 · GHSA-4h5r-r8cj-6rj3

An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6 through 2021.

LOW 32

An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6 through 2021.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00352 Published 2025-02-13 No fix listed CWE-121

TI-2023-17234 CVE-2023-34406 · GHSA-fc4h-jq3v-6rrg

An issue was discovered on Mercedes Benz NTG 6.

LOW 15

An issue was discovered on Mercedes Benz NTG 6.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00222 Published 2025-02-13 No fix listed CWE-190

TI-2023-17233 CVE-2023-34404 · GHSA-xp8w-5r26-q5qh

Mercedes-Benz head-unit NTG6 has Ethernet pins on Base Board to connect module CSB.

LOW 25

Mercedes-Benz head-unit NTG6 has Ethernet pins on Base Board to connect module CSB.

CVSS 3.1MEDIUM 4.9 Adjacent network Low privileges User interaction EPSS 0.00444 Published 2025-02-13 No fix listed CWE-284

TI-2023-17232 CVE-2023-34403 · GHSA-2x4h-9pj5-8p4x

Mercedes-Benz head-unit NTG6 has Ethernet pins on Base Board to connect module CSB.

LOW 22

Mercedes-Benz head-unit NTG6 has Ethernet pins on Base Board to connect module CSB.

CVSS 3.1MEDIUM 4.9 Adjacent network Low privileges User interaction EPSS 0.00232 Published 2025-02-13 No fix listed CWE-284

TI-2023-17231 CVE-2023-34402 · GHSA-rcq4-h567-5923

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over…

LOW 33

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB.

CVSS 3.1HIGH 7.7 Local No auth No interaction EPSS 0.00223 Published 2025-02-13 No fix listed CWE-787

TI-2023-17230 CVE-2023-34401 · GHSA-gh3v-mv9p-hffw

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over…

LOW 17

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB.

CVSS 3.1LOW 3.7 Network Low privileges User interaction EPSS 0.00286 Published 2025-02-13 No fix listed CWE-125

TI-2023-17229 CVE-2023-34400 · GHSA-f5x3-46hh-69h6

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over…

MEDIUM 40

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00676 Published 2025-02-13 No fix listed CWE-476

TI-2023-17228 CVE-2023-34399 · GHSA-5p7x-h37p-q967

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over…

MEDIUM 50

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00834 Published 2025-02-13 No fix listed CWE-190

TI-2023-17227 CVE-2023-34398 · GHSA-phh8-qcpx-2xhf

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over…

MEDIUM 40

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00676 Published 2025-02-13 No fix listed CWE-476

TI-2023-17226 CVE-2023-34397 · GHSA-jggw-p92x-6h2m

Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings…

MEDIUM 40

Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00636 Published 2025-02-13 No fix listed CWE-400

TI-2023-25640 CVE-2023-47393 · GHSA-x9cp-rmp2-c7h2

An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view…

LOW 31

An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the maintenance orders of other users and access sensitive user information via unspecified vectors.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.005 Published 2023-11-22 No fix listed CWE-200

TI-2023-25639 CVE-2023-47392 · GHSA-j97j-gq6f-fjfg

An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view…

LOW 31

An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the carts of other users via sending a crafted add order request.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.005 Published 2023-11-22 No fix listed CWE-200

TI-2023-09420 CVE-2023-23590 · GHSA-gqq3-j944-f364

Mercedes-Benz XENTRY Retail Data Storage 7.8.1 allows remote attackers to cause a denial…

MEDIUM 61

Mercedes-Benz XENTRY Retail Data Storage 7.8.1 allows remote attackers to cause a denial of service (device restart) via an unauthenticated API request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.2644 Published 2023-01-15 No fix listed CWE-400

TI-2021-06258 CVE-2021-23910 · GHSA-48rv-q8qm-4x9h

An issue was discovered in HERMES 2.1 in the MBUX Infotainment System on Mercedes-Benz…

MEDIUM 46

An issue was discovered in HERMES 2.1 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0174 Published 2021-05-13 No fix listed CWE-787

TI-2021-06257 CVE-2021-23909 · GHSA-xgjg-42m3-rrw5

An issue was discovered in HERMES 2.1 in the MBUX Infotainment System on Mercedes-Benz…

MEDIUM 47

An issue was discovered in HERMES 2.1 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02361 Published 2021-05-13 No fix listed CWE-787

TI-2021-06256 CVE-2021-23908 · GHSA-r57j-hvj5-9m8v

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on…

MEDIUM 47

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02362 Published 2021-05-13 No fix listed CWE-843

TI-2021-06255 CVE-2021-23907 · GHSA-h34f-cf95-vh44

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on…

MEDIUM 47

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02362 Published 2021-05-13 No fix listed

TI-2021-06254 CVE-2021-23906 · GHSA-jx2c-9rxg-v58w

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on…

LOW 32

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00804 Published 2021-05-13 No fix listed CWE-20

TI-2020-12696 CVE-2020-16142 · GHSA-x6wm-36gm-8wq5

On Mercedes-Benz C Class AMG Premium Plus c220 BlueTec vehicles, the Bluetooth stack…

LOW 18

On Mercedes-Benz C Class AMG Premium Plus c220 BlueTec vehicles, the Bluetooth stack mishandles %x and %c format-string specifiers in a device name in the COMAND infotainment software.

CVSS 3.1LOW 3.5 Adjacent network No auth User interaction EPSS 0.00759 Published 2020-08-27 No fix listed CWE-134

TI-2018-12844 CVE-2018-18071 · GHSA-v39m-fc2p-hp53

An issue was discovered in the Daimler Mercedes-Benz Me app 2.11.0-846 for iOS.

LOW 36

An issue was discovered in the Daimler Mercedes-Benz Me app 2.11.0-846 for iOS.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01409 Published 2018-10-09 No fix listed CWE-319

TI-2018-12843 CVE-2018-18070 · GHSA-7hcp-vf3m-fx74

An issue was discovered in Daimler Mercedes-Benz COMAND 17/13.0 50.12 on Mercedes-Benz…

LOW 29

An issue was discovered in Daimler Mercedes-Benz COMAND 17/13.0 50.12 on Mercedes-Benz C-Class 2018 vehicles.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01054 Published 2018-10-09 No fix listed CWE-835