CVE-2021-23908
low-risk
Published 2021-05-13
An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. A type confusion issue affects MultiSvSetAttributes in the HiQnet Protocol, leading to remote code execution.
Do I need to act?
~
3.3% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
2
CVSS 2.9/10
Low
PHYSICAL
/ HIGH complexity
Affected Products (1)
Headunit Ntg6 Mercedes-Benz User Experience
Affected Vendors
References (6)
Third Party Advisory
https://keenlab.tencent.com/en/2021/05/12/Tencent-Security-Keen-Lab-Experimental...
Third Party Advisory
https://media.daimler.com/marsMediaSite/en/instance/ko.xhtml?oid=49946866
Third Party Advisory
https://keenlab.tencent.com/en/2021/05/12/Tencent-Security-Keen-Lab-Experimental...
Third Party Advisory
https://media.daimler.com/marsMediaSite/en/instance/ko.xhtml?oid=49946866
20
/ 100
low-risk
Severity
8/34 · Low
Exploitability
7/34 · Low
Exposure
5/34 · Minimal