CVE-2021-23910

An issue was discovered in HERMES 2.1 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. There is an out-of-bounds array access in RemoteDiagnosisApp...

CVE-2021-23910

CVE-2021-23910 affects Mercedes‑Benz’s HERMES 2.1 in the MBUX Infotainment System (through 2021). The vulnerability is a flaw in the RemoteDiagnosisApp caused by an out‑of‑bounds array access. According to the sources in the connected documents, the issue is exploitable over the network with no a...

CVE-2021-23908

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. A type confusion issue affects MultiSvSetAttributes in the HiQnet Protocol, leading to remote code execution...

CVE-2021-23908

The CVE-2021-23908 entry concerns Mercedes-Benz MBUSA’s MBUX Infotainment System, specifically Headunit NTG6. The vulnerability is a type confusion in the HiQnet Protocol’s MultiSvSetAttributes function, which can lead to remote code execution. Documents in the connected set confirm affected prod...

CVE-2021-23907

CVE-2021-23907 affects Mercedes-Benz MBUX Headunit NTG6 (through 2021). The issue stems from the HiQnet Protocol: counts in MultiSvGet, GetAttributes, and MultiSvSet are not checked, enabling remote code execution over the network. Reported CVSS vectors indicate a high/critical impact (CVSS v3.1 ...

CVE-2021-23906

CVE-2021-23906 affects Mercedes-Benz Headunit NTG6 (MBUX Infotainment System) through 2021. A message length in the HiQnet Protocol is not checked, enabling remote code execution. No exploitation/vector details are provided in the sources; no remediation version is stated.

CVE-2021-23906: Improper Input Validation

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. A Message Length is not checked in the HiQnet Protocol, leading to remote code execution...

CVE-2021-23909: Out-of-bounds Write

An issue was discovered in HERMES 2.1 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. The SH2 MCU allows remote code execution...

PT-2021-15603

Name of the Vulnerable Software and Affected Versions: Mercedes-Benz MBUX Infotainment System versions through 2021 Description: An issue was discovered in the Headunit NTG6, where a Message Length is not checked in the HiQnet Protocol, leading to remote code execution. Recommendations: For...

PT-2021-15604

Name of the Vulnerable Software and Affected Versions: Mercedes-Benz MBUX Infotainment System versions through 2021 Description: An issue in the Headunit NTG6 of the MBUX Infotainment System allows remote code execution due to the lack of count checks in the MultiSvGet, GetAttributes, and...

PT-2021-15607

Name of the Vulnerable Software and Affected Versions: MBUX Infotainment System versions 2.1 and earlier Description: An issue was discovered in the MBUX Infotainment System, specifically in the HERMES 2.1 version, which affects Mercedes-Benz vehicles through 2021. The issue is related to an...

PT-2021-15605

Name of the Vulnerable Software and Affected Versions: Mercedes-Benz MBUX Infotainment System versions through 2021 Description: A type confusion issue affects the MultiSvSetAttributes function in the HiQnet Protocol, leading to remote code execution. This issue was discovered in the Headunit NTG...

CVE-2021-23908: Access of Resource Using Incompatible Type

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. A type confusion issue affects MultiSvSetAttributes in the HiQnet Protocol, leading to remote code execution...

CVE-2021-23907: Undefined Security Weakness

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. The count in MultiSvGet, GetAttributes, and MultiSvSet is not checked in the HiQnet Protocol, leading to remote code execution...

CVE-2021-23910: Out-of-bounds Write

An issue was discovered in HERMES 2.1 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. There is an out-of-bounds array access in RemoteDiagnosisApp...

PT-2021-15606

Name of the Vulnerable Software and Affected Versions: HERMES version 2.1 Description: An issue was discovered in the MBUX Infotainment System on Mercedes-Benz vehicles, allowing remote code execution through the SH2 MCU. Recommendations: For HERMES version 2.1, at the moment, there is no...