CVE-2023-34402

CVSS 7.7 HIGHEPSS 0.2%CWE-787

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 7.7EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

13 feb 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside file is encapsulate another file, which service will drop during processing. Due to missed checks, attacker can achieve Arbitrary File Write with service speech rights.

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Productos afectados

n/a · n/a

Referencias

https://securelist.com/mercedes-benz-head-unit-security-research/115218/