36 matches found
EUVD-2021-10829
Malware in sbrugna...
EUVD-2021-10830
Malware in sbrugna...
EUVD-2021-10833
Malware in sbrugna...
EUVD-2021-10832
Malware in sbrugna...
CVE-2021-23908
An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. A type confusion issue affects MultiSvSetAttributes in the HiQnet Protocol, leading to remote code execution...
CVE-2021-23909
An issue was discovered in HERMES 2.1 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. The SH2 MCU allows remote code execution...
CVE-2021-23906
An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. A Message Length is not checked in the HiQnet Protocol, leading to remote code execution...
The vulnerability of the servicebroker framework of the MoCCA multimedia system of Mercedes-Benz User Experience (MBUX) allows a hacker to execute arbitrary code or trigger a service failure.
The vulnerability of the servicebroker framework of the MoCCA multimedia system of Mercedes-Benz User Experience MBUX is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure...
The vulnerability of the UserData service in the Mercedes-Benz MBUX multimedia system allows a intruder to gain unauthorized access to protected information.
The vulnerability of the UserData service in the Mercedes-Benz MBUX multimedia system is related to deficiencies in access control due to synchronization errors when using a shared resource “Race Mode”. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected...
Mercedes-Benz Head Unit security research report
Introduction This report covers the research of the Mercedes-Benz Head Unit, which was made by our team. Mercedes-Benz's latest Head Unit infotainment system is called Mercedes-Benz User Experience MBUX. We performed analysis of the first generation MBUX. MBUX was previously analysed by KeenLab...
PT-2025-1226
Name of the Vulnerable Software and Affected Versions Mercedes-Benz head-unit NTG6 affected versions not specified Description The issue is related to insufficient input validation in the UserDataExchangeServiceClient::unpackVoiceTagArchiveOptimized function of the Mercedes-Benz User Experience...
CVE-2021-23907
An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. The count in MultiSvGet, GetAttributes, and MultiSvSet is not checked in the HiQnet Protocol, leading to remote code execution...
CVE-2021-23909
An issue was discovered in HERMES 2.1 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. The SH2 MCU allows remote code execution...
CVE-2021-23910
An issue was discovered in HERMES 2.1 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. There is an out-of-bounds array access in RemoteDiagnosisApp...
Remote code execution
An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. The count in MultiSvGet, GetAttributes, and MultiSvSet is not checked in the HiQnet Protocol, leading to remote code execution...
Out-of-bounds
An issue was discovered in HERMES 2.1 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. There is an out-of-bounds array access in RemoteDiagnosisApp...
Remote code execution
An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. A Message Length is not checked in the HiQnet Protocol, leading to remote code execution...
CVE-2021-23909
An issue was discovered in HERMES 2.1 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. The SH2 MCU allows remote code execution...
CVE-2021-23908
An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. A type confusion issue affects MultiSvSetAttributes in the HiQnet Protocol, leading to remote code execution...