Vulnerabilities (CVE)

Filtered by vendor Mercedes-benz Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-47392 1 Mercedes-benz 1 Mercedes Me 2023-11-29 N/A 5.3 MEDIUM
An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the carts of other users via sending a crafted add order request.
CVE-2023-47393 1 Mercedes-benz 1 Mercedes Me 2023-11-29 N/A 5.3 MEDIUM
An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the maintenance orders of other users and access sensitive user information via unspecified vectors.
CVE-2018-18070 1 Mercedes-benz 2 C-class, Comand 2021-09-13 7.1 HIGH 5.9 MEDIUM
An issue was discovered in Daimler Mercedes-Benz COMAND 17/13.0 50.12 on Mercedes-Benz C-Class 2018 vehicles. Defining or receiving a specific navigation route might cause the system to freeze and reboot after a few transmissions. When the system next starts, it tries to re-calculate the route, which will cause a boot loop. (Under certain circumstances, it is possible to quickly overwrite the malicious route to regain the stability of the system.)
CVE-2021-23906 1 Mercedes-benz 8 A 220, A 220 4matic, E 350 and 5 more 2021-05-25 2.1 LOW 6.8 MEDIUM
An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. A Message Length is not checked in the HiQnet Protocol, leading to remote code execution.