CVE-2023-34402

CVSS 7.7 HIGHEPSS 0.2%CWE-787

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 7.7EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

13 fev 2025Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside file is encapsulate another file, which service will drop during processing. Due to missed checks, attacker can achieve Arbitrary File Write with service speech rights.

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Produtos afetados

n/a · n/a

Referências

https://securelist.com/mercedes-benz-head-unit-security-research/115218/