Daimler Vulnerabilidad

Cronología

Escribe

Vehicle Software16

Producto

Daimler Mercedes HERMES8
Daimler Mercedes MBUX6
Daimler Mercedes-Benz C Class AMG Premium Plus c22 ...2

Contramedidas

Official Fix6
Temporary Fix0
Workaround0
Unavailable2
Not Defined8

Explotabilidad

High0
Functional0
Proof-of-Concept2
Unproven0
Not Defined14

Vector de acceso

Not Defined0
Physical12
Local4
Adjacent0
Network0

Autenticación

Not Defined0
High0
Low2
None14

La interacción del usuario

Not Defined0
Required0
None16

C3BM Index

CVSSv3 Base

≤10
≤20
≤32
≤44
≤56
≤62
≤70
≤82
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤32
≤44
≤56
≤62
≤72
≤80
≤90
≤100

VulDB

≤10
≤22
≤30
≤48
≤52
≤64
≤70
≤80
≤90
≤100

NVD

≤10
≤20
≤32
≤40
≤56
≤60
≤70
≤80
≤92
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k14
<2k0
<5k0
<10k0
<25k2
<50k0
<100k0
≥100k0

Explotar hoy

<1k16
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (6): Mercedes-Benz C Class AMG Premium Plus c220 BlueTec (1), Mercedes Comand (1), Mercedes HERMES (6), Mercedes MBUX (5), Mercedes Me App (1), Mercedes XENTRY Retail Data Storage (1)

Fecha de publicaciónBaseTempVulnerabilidadProdExpConEPSSCTICVE
2023-01-156.46.1Daimler Mercedes XENTRY Retail Data Storage API Request reboot denegación de servicioVehicle SoftwareProof-of-ConceptNot Defined0.001670.00CVE-2023-23590
2021-05-145.35.1Daimler Mercedes MBUX HERMES 2.1 RemoteDiagnosisApp divulgación de informaciónVehicle SoftwareNot DefinedOfficial Fix0.005770.03CVE-2021-23910
2021-05-146.25.9Daimler Mercedes MBUX HERMES 2.1 Local Privilege EscalationVehicle SoftwareNot DefinedOfficial Fix0.034880.04CVE-2021-23909
2021-05-143.93.8Daimler Mercedes MBUX Headunit NTG6 MultiSvSetAttributes escalada de privilegiosVehicle SoftwareNot DefinedOfficial Fix0.029380.02CVE-2021-23908
2021-05-143.93.8Daimler Mercedes MBUX Headunit NTG6 MultiSvSet Local Privilege EscalationVehicle SoftwareNot DefinedOfficial Fix0.034880.00CVE-2021-23907
2021-05-143.93.8Daimler Mercedes MBUX Headunit NTG6 Local Privilege EscalationVehicle SoftwareNot DefinedOfficial Fix0.017930.00CVE-2021-23906
2020-11-162.22.2Daimler Mercedes HERMES Debug Interface divulgación de informaciónVehicle SoftwareNot DefinedNot Defined0.000650.04CVE-2019-19563
2020-11-164.24.2Daimler Mercedes HERMES autenticación débilVehicle SoftwareNot DefinedNot Defined0.001000.00CVE-2019-19562
2020-11-162.22.2Daimler Mercedes HERMES Debug Interface divulgación de informaciónVehicle SoftwareNot DefinedNot Defined0.000650.00CVE-2019-19561
2020-11-164.24.2Daimler Mercedes HERMES Debug Interface autenticación débilVehicle SoftwareNot DefinedNot Defined0.001000.00CVE-2019-19560

5 no se muestran más entradas

🔒 Login Required

You need to signup and login to see more of the remaining 5 results.

◂ AnteriorVisión De ConjuntoPróximo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!