CVE-2021-23908

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. A type confusion issue affects MultiSvSetAttributes in the HiQnet Protocol, leading to remote code execution...

CVE-2021-23906

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. A Message Length is not checked in the HiQnet Protocol, leading to remote code execution...

CVE-2021-23909

An issue was discovered in HERMES 2.1 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. The SH2 MCU allows remote code execution...

CVE-2021-23907

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. The count in MultiSvGet, GetAttributes, and MultiSvSet is not checked in the HiQnet Protocol, leading to remote code execution...

Remote code execution

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. A Message Length is not checked in the HiQnet Protocol, leading to remote code execution...

CVE-2021-23910

An issue was discovered in HERMES 2.1 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. There is an out-of-bounds array access in RemoteDiagnosisApp...

CVE-2021-23910

CVE-2021-23910 affects Mercedes‑Benz’s HERMES 2.1 in the MBUX Infotainment System (through 2021). The vulnerability is a flaw in the RemoteDiagnosisApp caused by an out‑of‑bounds array access. According to the sources in the connected documents, the issue is exploitable over the network with no a...

CVE-2021-23909

An issue was discovered in HERMES 2.1 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. The SH2 MCU allows remote code execution...

CVE-2021-23909

CVE-2021-23909 affects Mercedes-Benz MBUX Infotainment System on the Hermes-based SH2 MCU (Hermes 2.1). The issue enables remote code execution over a network, via the SH2 MCU, per the vulnerability entry. The original description and NVD entry indicate a high/severe risk, with a CVSSv3.1 base sc...

CVE-2021-23908

The CVE-2021-23908 entry concerns Mercedes-Benz MBUSA’s MBUX Infotainment System, specifically Headunit NTG6. The vulnerability is a type confusion in the HiQnet Protocol’s MultiSvSetAttributes function, which can lead to remote code execution. Documents in the connected set confirm affected prod...

CVE-2021-23907

CVE-2021-23907 affects Mercedes-Benz MBUX Headunit NTG6 (through 2021). The issue stems from the HiQnet Protocol: counts in MultiSvGet, GetAttributes, and MultiSvSet are not checked, enabling remote code execution over the network. Reported CVSS vectors indicate a high/critical impact (CVSS v3.1 ...

CVE-2021-23906

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. A Message Length is not checked in the HiQnet Protocol, leading to remote code execution...

CVE-2021-23906

CVE-2021-23906 affects Mercedes-Benz Headunit NTG6 (MBUX Infotainment System) through 2021. A message length in the HiQnet Protocol is not checked, enabling remote code execution. No exploitation/vector details are provided in the sources; no remediation version is stated.

PT-2021-15605

Name of the Vulnerable Software and Affected Versions: Mercedes-Benz MBUX Infotainment System versions through 2021 Description: A type confusion issue affects the MultiSvSetAttributes function in the HiQnet Protocol, leading to remote code execution. This issue was discovered in the Headunit NTG...

PT-2021-15604

Name of the Vulnerable Software and Affected Versions: Mercedes-Benz MBUX Infotainment System versions through 2021 Description: An issue in the Headunit NTG6 of the MBUX Infotainment System allows remote code execution due to the lack of count checks in the MultiSvGet, GetAttributes, and...

Mercedes Benz HERMES E Series buffer error vulnerability

Mercedes Benz HERMES E Series is a series of Hermes Edition E Series cars by Mercedes Benz of Germany. A security vulnerability exists in HERMES version 2.1. A remote attacker could execute code via this vulnerability...

PT-2021-15603

Name of the Vulnerable Software and Affected Versions: Mercedes-Benz MBUX Infotainment System versions through 2021 Description: An issue was discovered in the Headunit NTG6, where a Message Length is not checked in the HiQnet Protocol, leading to remote code execution. Recommendations: For...

CVE-2021-23910: Out-of-bounds Write

An issue was discovered in HERMES 2.1 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. There is an out-of-bounds array access in RemoteDiagnosisApp...

Mercedes-Benz AG MBUX Infotainment System: Input validation error vulnerability

Mercedes-Benz AG MBUX Infotainment System is an application of Mercedes-Benz AG, USA. A user experience infotainment system that can be controlled by voice and touch input. An input validation error vulnerability exists in MBUX Infotainment System on Mercedes-Benz vehicles version 2021 and prior...

Mercedes Benz HERMES buffer error vulnerability

Mercedes Benz HERMES E Series is a series of Hermes Edition E Series cars by Mercedes Benz of Germany. A security vulnerability exists in HERMES version 2.1. The vulnerability originates from an out-of-bounds array access in the RemoteDiagnosisApp of the program...