CVE-2023-34404

The Mercedes-Benz head-unit NTG6 contains a vulnerability where Ethernet pins on the Base Board can be used to connect to the CSB module . An attacker with physical access to these pins can gain access to the internal network. By accessing a specific port, the attacker can send call requests to a...

CVE-2023-34400

The Mercedes-Benz head-unit NTG6 is vulnerable to a NULL pointer dereference (CWE-476) during the processing of profile settings. The issue occurs when the system attempts to import or export settings via USB ; specifically, the service fails to correctly parse the file header into a null-termina...

CVE-2023-34398

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive according boost library. The boost library contains a vulnerability/null pointer dereference...

PT-2025-1231 · Mercedes Benz · Mercedes-Benz Head-Unit Ntg6

Name of the Vulnerable Software and Affected Versions: Mercedes-Benz head-unit NTG6 affected versions not specified Description: The issue is related to the import or export of profile settings over USB in the Mercedes-Benz head-unit NTG6. Some values are serialized using the boost library, which...