Daimler Luki w zabezpieczeniach

Oś czasu

Rodzaj

Vehicle Software	16

Produkt

Daimler Mercedes HERMES	6
Daimler Mercedes MBUX	4
Daimler Mercedes XENTRY Retail Data Storage	2
Daimler Mercedes Comand	2
Daimler Mercedes-Benz C Class AMG Premium Plus c22 ...	2

Przeciwdziałanie

Official Fix	4
Temporary Fix	0
Workaround	0
Unavailable	4
Not Defined	8

Wykorzystywanie

High	0
Functional	2
Proof-of-Concept	4
Unproven	0
Not Defined	10

Wektor dostępu

Not Defined	0
Physical	10
Local	2
Adjacent	0
Network	4

Uwierzytelnianie

Not Defined	0
High	0
Low	2
None	14

Interakcja z użytkownikiem

Not Defined	0
Required	0
None	16

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	4
≤4	4
≤5	2
≤6	0
≤7	4
≤8	2
≤9	0
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	4
≤4	4
≤5	2
≤6	0
≤7	6
≤8	0
≤9	0
≤10	0

VulDB

≤1	0
≤2	4
≤3	0
≤4	4
≤5	2
≤6	4
≤7	2
≤8	0
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	4
≤4	0
≤5	2
≤6	2
≤7	0
≤8	2
≤9	2
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	12
<2k	2
<5k	0
<10k	0
<25k	2
<50k	0
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	16
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (6): Mercedes-Benz C Class AMG Premium Plus c220 BlueTec (1), Mercedes Comand (1), Mercedes HERMES (6), Mercedes MBUX (5), Mercedes Me App (1), Mercedes XENTRY Retail Data Storage (1)

Opublikowano	Base	Temp	Słaby punkt	Prod	Wyk	Prz	EPSS	CTI	CVE
2023-01-15	6.4	6.1	Daimler Mercedes XENTRY Retail Data Storage API Request reboot denial of service	Vehicle Software	Proof-of-Concept	Not Defined	0.00167	0.00	CVE-2023-23590
2021-05-14	5.3	5.1	Daimler Mercedes MBUX HERMES 2.1 RemoteDiagnosisApp information disclosure	Vehicle Software	Not Defined	Official Fix	0.00577	0.03	CVE-2021-23910
2021-05-14	6.2	5.9	Daimler Mercedes MBUX HERMES 2.1 Local Privilege Escalation	Vehicle Software	Not Defined	Official Fix	0.03488	0.04	CVE-2021-23909
2021-05-14	3.9	3.8	Daimler Mercedes MBUX Headunit NTG6 MultiSvSetAttributes privilege escalation	Vehicle Software	Not Defined	Official Fix	0.02938	0.02	CVE-2021-23908
2021-05-14	3.9	3.8	Daimler Mercedes MBUX Headunit NTG6 MultiSvSet Local Privilege Escalation	Vehicle Software	Not Defined	Official Fix	0.03488	0.00	CVE-2021-23907
2021-05-14	3.9	3.8	Daimler Mercedes MBUX Headunit NTG6 Local Privilege Escalation	Vehicle Software	Not Defined	Official Fix	0.01793	0.00	CVE-2021-23906
2020-11-16	2.2	2.2	Daimler Mercedes HERMES Debug Interface information disclosure	Vehicle Software	Not Defined	Not Defined	0.00065	0.04	CVE-2019-19563
2020-11-16	4.2	4.2	Daimler Mercedes HERMES weak authentication	Vehicle Software	Not Defined	Not Defined	0.00100	0.00	CVE-2019-19562
2020-11-16	2.2	2.2	Daimler Mercedes HERMES Debug Interface information disclosure	Vehicle Software	Not Defined	Not Defined	0.00065	0.00	CVE-2019-19561
2020-11-16	4.2	4.2	Daimler Mercedes HERMES Debug Interface weak authentication	Vehicle Software	Not Defined	Not Defined	0.00100	0.00	CVE-2019-19560

5 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 5 results.

◂ PoprzedniPrzeglądKolejny ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!