CVE-2021-23906
low-risk
Published 2021-05-13
An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. A Message Length is not checked in the HiQnet Protocol, leading to remote code execution.
Do I need to act?
-
0.30% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
1
CVSS 1.8/10
Low
PHYSICAL
/ HIGH complexity
Affected Products (1)
Mercedes-Benz User Experience
Affected Vendors
References (6)
Third Party Advisory
https://keenlab.tencent.com/en/2021/05/12/Tencent-Security-Keen-Lab-Experimental...
Third Party Advisory
https://media.daimler.com/marsMediaSite/en/instance/ko.xhtml?oid=49946866
Third Party Advisory
https://keenlab.tencent.com/en/2021/05/12/Tencent-Security-Keen-Lab-Experimental...
Third Party Advisory
https://media.daimler.com/marsMediaSite/en/instance/ko.xhtml?oid=49946866
11
/ 100
low-risk
Severity
5/34 · Minimal
Exploitability
1/34 · Minimal
Exposure
5/34 · Minimal