CVE-2023-34400
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB
High · published February 13, 2025
What it is
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. In case of parsing file, service try to define header inside the file and convert it to null-terminated string. If character is missed, will return null pointer.
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00676 · 51.6th percentile
- Published
- 2025-02-13T00:00Z
EPSS history
Timeline