CVE-2021-23907 - An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021

Back Back to CVE browser

CRITICAL

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021

Published May 13, 2021

9.8

CRITICAL

CVSS 3.1

EPSS 2.36%

Description

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. The count in MultiSvGet, GetAttributes, and MultiSvSet is not checked in the HiQnet Protocol, leading to remote code execution.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-10830
Advisory
https://keenlab.tencent.com/en/2021/05/12/Tencent-Security-Keen-Lab-Experimental-Security-Assessment-on-Mercedes-Benz-Cars/
x_refsource_MISCThird Party Advisory
https://keenlab.tencent.com/en/whitepapers/Mercedes_Benz_Security_Research_Report_Final.pdf
x_refsource_MISCExploitThird Party Advisory
https://media.daimler.com/marsMediaSite/en/instance/ko.xhtml?oid=49946866
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-10830		Advisory
https://keenlab.tencent.com/en/2021/05/12/Tencent-Security-Keen-Lab-Experimental-Security-Assessment-on-Mercedes-Benz-Cars/		x_refsource_MISCThird Party Advisory
https://keenlab.tencent.com/en/whitepapers/Mercedes_Benz_Security_Research_Report_Final.pdf		x_refsource_MISCExploitThird Party Advisory
https://media.daimler.com/marsMediaSite/en/instance/ko.xhtml?oid=49946866		x_refsource_MISCThird Party Advisory