UserData service Mercedes-Benz MBUX Unauthorized Access

The vulnerability of the UserData service in the Mercedes-Benz MBUX multimedia system is related to deficiencies in access control due to synchronization errors when using a shared resource “Race Mode”. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected...

MoCCA multimedia servicebroker framework Code Execution

The vulnerability of the servicebroker framework of the MoCCA multimedia system of Mercedes-Benz User Experience MBUX is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure...

CVE-2021-23908

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. A type confusion issue affects MultiSvSetAttributes in the HiQnet Protocol, leading to remote code execution...

PT-2021-15603

Name of the Vulnerable Software and Affected Versions: Mercedes-Benz MBUX Infotainment System versions through 2021 Description: An issue was discovered in the Headunit NTG6, where a Message Length is not checked in the HiQnet Protocol, leading to remote code execution. Recommendations: For...

PT-2021-15605

Name of the Vulnerable Software and Affected Versions: Mercedes-Benz MBUX Infotainment System versions through 2021 Description: A type confusion issue affects the MultiSvSetAttributes function in the HiQnet Protocol, leading to remote code execution. This issue was discovered in the Headunit NTG...

PT-2021-15604

Name of the Vulnerable Software and Affected Versions: Mercedes-Benz MBUX Infotainment System versions through 2021 Description: An issue in the Headunit NTG6 of the MBUX Infotainment System allows remote code execution due to the lack of count checks in the MultiSvGet, GetAttributes, and...