Vulnerability Description
An issue was discovered on Mercedes Benz NTG 6. A possible integer overflow exists in the user data import/export function of NTG (New Telematics Generation) 6 head units. To perform this attack, local access to USB interface of the car is needed. With prepared data, an attacker can cause the User-Data service to fail. The failed service instance will restart automatically.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mercedes-Benz | Headunit Ntg6 Mercedes-Benz User Experience | <= 2021 |
Related Weaknesses (CWE)
References
- https://securelist.com/mercedes-benz-head-unit-security-research/115218/Third Party Advisory
FAQ
What is CVE-2023-34406?
CVE-2023-34406 is a vulnerability with a CVSS score of 3.3 (LOW). An issue was discovered on Mercedes Benz NTG 6. A possible integer overflow exists in the user data import/export function of NTG (New Telematics Generation) 6 head units. To perform this attack, loca...
How severe is CVE-2023-34406?
CVE-2023-34406 has been rated LOW with a CVSS base score of 3.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-34406?
Check the references section above for vendor advisories and patch information. Affected products include: Mercedes-Benz Headunit Ntg6 Mercedes-Benz User Experience.