Daimler الثغرات

التسلسل الزمني

النوع

Vehicle Software15

منتج

Daimler Mercedes HERMES6
Daimler Mercedes MBUX5
Daimler Mercedes XENTRY Retail Data Storage1
Daimler Mercedes-Benz C Class AMG Premium Plus c22 ...1
Daimler Mercedes Me App1

معالجة

Official Fix6
Temporary Fix0
Workaround0
Unavailable2
Not Defined7

قابلية الاستغلال

High1
Functional1
Proof-of-Concept2
Unproven0
Not Defined11

متجه الوصول

Not Defined0
Physical10
Local2
Adjacent1
Network2

توثيق

Not Defined0
High1
Low2
None12

تفاعل المستخدم

Not Defined0
Required1
None14

C3BM Index

CVSSv3 Base

≤10
≤20
≤33
≤43
≤53
≤62
≤73
≤81
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤33
≤43
≤53
≤63
≤73
≤80
≤90
≤100

VulDB

≤10
≤23
≤30
≤45
≤52
≤63
≤72
≤80
≤90
≤100

NVD

≤10
≤20
≤33
≤40
≤53
≤61
≤70
≤82
≤91
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

المجهز

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

إكسبلويت ذات هجوم فوري

<1k13
<2k1
<5k0
<10k0
<25k1
<50k0
<100k0
≥100k0

إكسبلويت اليوم

<1k15
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

حجم سوق الإكسبلويت

🔴 CTI النشاطات

Affected Products (6): Mercedes-Benz C Class AMG Premium Plus c220 BlueTec (1), Mercedes Comand (1), Mercedes HERMES (6), Mercedes MBUX (5), Mercedes Me App (1), Mercedes XENTRY Retail Data Storage (1)

منشورBaseTempالثغرةProdق�معالجةCTIEPSSCVE
15/01/20236.46.1Daimler Mercedes XENTRY Retail Data Storage API Request reboot الحرمان من الخدمةVehicle SoftwareProof-of-ConceptNot Defined0.040.01055CVE-2023-23590
14/05/20215.35.1Daimler Mercedes MBUX HERMES 2.1 RemoteDiagnosisApp الكشف عن المعلوماتVehicle SoftwareNot DefinedOfficial Fix0.030.00954CVE-2021-23910
14/05/20216.25.9Daimler Mercedes MBUX HERMES 2.1 Local Privilege EscalationVehicle SoftwareNot DefinedOfficial Fix0.070.05634CVE-2021-23909
14/05/20213.93.8Daimler Mercedes MBUX Headunit NTG6 MultiSvSetAttributes تجاوز الصلاحياتVehicle SoftwareNot DefinedOfficial Fix0.070.05634CVE-2021-23908
14/05/20213.93.8Daimler Mercedes MBUX Headunit NTG6 MultiSvSet Local Privilege EscalationVehicle SoftwareNot DefinedOfficial Fix0.050.05634CVE-2021-23907
14/05/20213.93.8Daimler Mercedes MBUX Headunit NTG6 Local Privilege EscalationVehicle SoftwareNot DefinedOfficial Fix0.040.05634CVE-2021-23906
16/11/20202.22.2Daimler Mercedes HERMES Debug Interface الكشف عن المعلوماتVehicle SoftwareNot DefinedNot Defined0.000.00885CVE-2019-19563
16/11/20204.24.2Daimler Mercedes HERMES توثيق ضعيفVehicle SoftwareNot DefinedNot Defined0.000.00885CVE-2019-19562
16/11/20202.22.2Daimler Mercedes HERMES Debug Interface الكشف عن المعلوماتVehicle SoftwareNot DefinedNot Defined0.020.00885CVE-2019-19561
16/11/20204.24.2Daimler Mercedes HERMES Debug Interface توثيق ضعيفVehicle SoftwareNot DefinedNot Defined0.010.00885CVE-2019-19560

5 بعض الادخالات لم يتم عرضها

🔒 Login Required

You need to signup and login to see more of the remaining 5 results.

التالي ▸نظرة عامة◂ السابق

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!