Mercedes-Benz HERMES Certification Bypass Vulnerability

Mercedes-Benz HERMES is a telematics control unit equipped in Mercedes-Benz connected vehicles. An authentication bypass vulnerability exists in the debug interface in Mercedes-Benz HERMES 2.1. An attacker with physical access to the device hardware could exploit this vulnerability to obtain syst...

Mercedes-Benz HERMES misconfiguration vulnerability (CNVD-2021-17724)

Mercedes-Benz HERMES is a telematics control unit equipped in Mercedes-Benz connected vehicles. A misconfiguration vulnerability exists in the debug interface in Mercedes-Benz HERMES 1.5. An attacker with direct physical access to the device hardware could exploit the vulnerability to obtain...

Mercedes-Benz HERMES Certification Bypass Vulnerability (CNVD-2021-17722)

Mercedes-Benz HERMES is a telematics control unit equipped in Mercedes-Benz connected vehicles. An authentication bypass vulnerability exists in the debug interface in Mercedes-Benz HERMES 1. An attacker with physical access to the device hardware could exploit this vulnerability to obtain system...

Mercedes-Benz HERMES Certification Bypass Vulnerability (CNVD-2021-17723)

Mercedes-Benz HERMES is a telematics control unit equipped in Mercedes-Benz connected vehicles. An authentication bypass vulnerability exists in the debug interface in Mercedes-Benz HERMES 1.5. An attacker with physical access to the device hardware could exploit this vulnerability to obtain syst...

Mercedes-Benz HERMES Misconfiguration Vulnerability

Mercedes-Benz HERMES is a telematics control unit equipped in Mercedes-Benz connected vehicles. A misconfiguration vulnerability exists in the debug interface in Mercedes-Benz HERMES 2.1. An attacker with direct physical access to the device hardware could exploit the vulnerability to obtain...

Mercedes-Benz HERMES misconfiguration vulnerability (CNVD-2021-17721)

Mercedes-Benz HERMES is a telematics control unit equipped in Mercedes-Benz connected vehicles. A misconfiguration vulnerability exists in the debug interface in Mercedes-Benz HERMES 1. An attacker with direct physical access to the device hardware could exploit the vulnerability to obtain cellul...

CVE-2019-19561

A misconfiguration in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with direct physical access to device hardware to obtain cellular modem information...

CVE-2019-19561

CVE-2019-19561 affects Mercedes‑Benz HERMES 1.5 Telematics Control Unit; a misconfiguration in the Hermes debug interface can, with direct physical access, disclose cellular modem information. The available documents describe the vulnerability and affected component but do not provide a remediati...

CVE-2019-19557

A misconfiguration in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with direct physical access to device hardware to obtain cellular modem information...

CVE-2019-19557

CVE-2019-19557 describes a misconfiguration in the debug interface of the Mercedes‑Benz HERMES 1 Telematics Control Unit. An attacker with direct physical access to the device could extract cellular‑modem information due to this misconfiguration. Documented in multiple sources (NVD entry, Red Hat...

CVE-2019-19563

A misconfiguration in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with direct physical access to device hardware to obtain cellular modem information...

CVE-2019-19563

CVE-2019-19563 concerns a misconfiguration in the debug interface of Mercedes-Benz HERMES 2.1. The issue, exploitable by an attacker with direct physical access to the device hardware, could expose cellular modem information. The description across sources confirms the vulnerability is tied to a ...

CVE-2019-19560

Mercedes‑Benz HERMES 1.5 contains an authentication bypass in the debug interface of the HERMES TCU. A physical attacker with access to device hardware can obtain system information. The CVE-2019-19560 entry is supported by multiple sources (RH, NVD, CVE records) and is linked to the HERMES compo...

CVE-2019-19560

An authentication bypass in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with physical access to device hardware to obtain system information...

CVE-2019-19556

Mercedes-Benz HERMES 1 Telematics Control Unit contains an authentication bypass in its debug interface. An attacker with physical access can bypass auth and obtain system information from the device. Affected component/file is the Hermes TCU firmware exposing a debugging interface; underlying ro...

CVE-2019-19562

The CVE-2019-19562 entry concerns a Mercedes-Benz HERMES 2.1 Telematics Control Unit where a vulnerability in the debug interface enables an authentication bypass . An attacker with physical access to the device hardware could obtain system information. Connected documents reiterate the same desc...

CVE-2019-19562

An authentication bypass in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with physical access to device hardware to obtain system information...

PT-2020-10189

Name of the Vulnerable Software and Affected Versions Mercedes-Benz HERMES version 1.5 Description A misconfiguration in the debug interface allows an attacker with direct physical access to device hardware to obtain cellular modem information. Recommendations For Mercedes-Benz HERMES version 1.5...

CVE-2019-19562: Improper Authentication

An authentication bypass in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with physical access to device hardware to obtain system information...

CVE-2019-19556: Undefined Security Weakness

An authentication bypass in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with physical access to device hardware to obtain system information...