CVE-2023-34397 - Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB

Back Back to CVE browser

HIGH

Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB

Published Feb 13, 2025

7.5

HIGH

CVSS 3.1

EPSS 0.64%

Description

Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB. During parsing you can trigger that the service will be crashed.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-400

Uncontrolled Resource Consumption

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-38475
Advisory
https://securelist.com/mercedes-benz-head-unit-security-research/115218/
Third Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-38475		Advisory
https://securelist.com/mercedes-benz-head-unit-security-research/115218/		Third Party Advisory