Bmw

bmw

7 CVEs • 4 products

Products (4)

Click to collapse

Toggle

Head Unit Hu Nbt Firmware

head_unit_hu_nbt_firmware

Telematics Control Unit Firmware

telematics_control_unit_firmware

Telematics Control Unit

telematics_control_unit

Head Unit Hu Nbt

head_unit_hu_nbt

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-9322 1Bmw 1Head Unit Hu Nbt Firmware Jun 17, 2026 May 31, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows local attacks involving the USB or OBD-II interf...Show more The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows local attacks involving the USB or OBD-II interface. An attacker can bypass the code-signing protection mechanism for firmware updates, and consequently obtain a root shell.Show less
CVE-2018-9320 1Bmw 1Head Unit Hu Nbt Firmware Jun 17, 2026 May 31, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows a local attack when a USB device is plugged in.
CVE-2018-9318 1Bmw 1Telematics Control Unit Firmware Jun 17, 2026 May 31, 2018 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 The Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW vehicles produced in 2012 through 2018, allows a remote attack via a cellular network.
CVE-2018-9314 1Bmw 1Head Unit Hu Nbt Firmware Jun 17, 2026 May 31, 2018 N/A· v4 6.8 MEDIUM· v3 7.2 HIGH· v2 The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows an attack by an attacker who has direct physical...Show more The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows an attack by an attacker who has direct physical access.Show less
CVE-2018-9313 1Bmw 1Head Unit Hu Nbt Firmware Jun 17, 2026 May 31, 2018 N/A· v4 5.3 MEDIUM· v3 5.7 MEDIUM· v2 The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows a remote attack via Bluetooth when in pairing mo...Show more The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows a remote attack via Bluetooth when in pairing mode, leading to a Head Unit reboot.Show less
CVE-2018-9312 1Bmw 1Head Unit Hu Nbt Firmware Jun 17, 2026 May 31, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows a local attack when a USB device is plugged in.
CVE-2018-9311 1Bmw 1Telematics Control Unit Firmware Jun 17, 2026 May 31, 2018 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 The Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW vehicles produced in 2012 through 2018, allows a remote attack via a cellular network.