CVE-2021-23907

Published: May 13, 2021Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. The count in MultiSvGet, GetAttributes, and MultiSvSet is not checked in the HiQnet Protocol, leading to remote code execution.

Affected (1)

Products: Mercedes Benz: Headunit Ntg6 Mercedes Benz User Experience

Mercedes Benz

1 product

Headunit Ntg6 Mercedes Benz User Experience

Configuration A

1 vulnerable · 7 platform

Vulnerable Software	Affected Versions
Mercedes Benz Headunit Ntg6 Mercedes Benz User Experience	Version 2021

Running on/with	Platform Versions
Mercedes Benz A 220	All versions
Mercedes Benz A 220 4matic	All versions
Mercedes Benz E 350	All versions
Mercedes Benz E 350 4matic	All versions
Mercedes Benz Eqc	All versions
Mercedes Benz Gle 350	All versions
Mercedes Benz Gle 350 4matic	All versions