CVE-2018-18071

An issue was discovered in the Daimler Mercedes-Benz Me app 2.11.0-846 for iOS

published October 9, 2018

CVSS
—
EPSS
1%
Percentile
72.3
In the wild
Unconfirmed
What it is

An issue was discovered in the Daimler Mercedes-Benz Me app 2.11.0-846 for iOS. The encrypted Connected Vehicle API data exchange between the app and a server might be intercepted. The app can be used to operate the Remote Parking Pilot, unlock the vehicle, or obtain sensitive information such as latitude, longitude, and direction of travel.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01409 · 72.3th percentile
Published
2018-10-09T09:00Z
EPSS history
Timeline
  • 09 OCT 09:00Z
    An issue was discovered in the Daimler Mercedes-Benz Me app 2.11.0-846 for iOS
    cvelistv5