Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4h5r-r8cj-6rj3

Опубликовано: 14 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.8

Описание

An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6 through 2021. A possible stack buffer overflow in the Service Broker service affects NTG 6 head units. To perform this attack, physical access to Ethernet pins of the head unit base board is needed. With a static IP address, an attacker can connect via the internal network to the Service Broker service. With prepared HTTP requests, an attacker can cause the Service-Broker service to fail.

An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6 through 2021. A possible stack buffer overflow in the Service Broker service affects NTG 6 head units. To perform this attack, physical access to Ethernet pins of the head unit base board is needed. With a static IP address, an attacker can connect via the internal network to the Service Broker service. With prepared HTTP requests, an attacker can cause the Service-Broker service to fail.

EPSS

Процентиль: 29%
0.00105
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-121

Связанные уязвимости

CVSS3: 6.8
nvd
12 месяцев назад

An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6 through 2021. A possible stack buffer overflow in the Service Broker service affects NTG 6 head units. To perform this attack, physical access to Ethernet pins of the head unit base board is needed. With a static IP address, an attacker can connect via the internal network to the Service Broker service. With prepared HTTP requests, an attacker can cause the Service-Broker service to fail.

CVSS3: 6.8
fstec
около 1 года назад

Уязвимость службы servicebroker фреймворка MoCCA системы мультимедиа Mercedes-Benz User Experience (MBUX), позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании

EPSS

Процентиль: 29%
0.00105
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-121