CVE-2021-23910

CVE-2021-23910 affects Mercedes‑Benz’s HERMES 2.1 in the MBUX Infotainment System (through 2021). The vulnerability is a flaw in the RemoteDiagnosisApp caused by an out‑of‑bounds array access. According to the sources in the connected documents, the issue is exploitable over the network with no a...

CVE-2021-23908

The CVE-2021-23908 entry concerns Mercedes-Benz MBUSA’s MBUX Infotainment System, specifically Headunit NTG6. The vulnerability is a type confusion in the HiQnet Protocol’s MultiSvSetAttributes function, which can lead to remote code execution. Documents in the connected set confirm affected prod...

CVE-2021-23908

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. A type confusion issue affects MultiSvSetAttributes in the HiQnet Protocol, leading to remote code execution...

CVE-2021-23907

CVE-2021-23907 affects Mercedes-Benz MBUX Headunit NTG6 (through 2021). The issue stems from the HiQnet Protocol: counts in MultiSvGet, GetAttributes, and MultiSvSet are not checked, enabling remote code execution over the network. Reported CVSS vectors indicate a high/critical impact (CVSS v3.1 ...

CVE-2021-23906

CVE-2021-23906 affects Mercedes-Benz Headunit NTG6 (MBUX Infotainment System) through 2021. A message length in the HiQnet Protocol is not checked, enabling remote code execution. No exploitation/vector details are provided in the sources; no remediation version is stated.