Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xp8w-5r26-q5qh

Опубликовано: 14 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

Mercedes-Benz head-unit NTG6 has Ethernet pins on Base Board to connect module CSB. Attacker can connect to these pins and get access to internal network. As a result, by accessing a specific port an attacker can send call request to all registered services in router and achieve command injection vulnerability.

Mercedes-Benz head-unit NTG6 has Ethernet pins on Base Board to connect module CSB. Attacker can connect to these pins and get access to internal network. As a result, by accessing a specific port an attacker can send call request to all registered services in router and achieve command injection vulnerability.

EPSS

Процентиль: 14%
0.00045
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 4.9
nvd
12 месяцев назад

Mercedes-Benz head-unit NTG6 has Ethernet pins on Base Board to connect module CSB. Attacker can connect to these pins and get access to internal network. As a result, by accessing a specific port an attacker can send call request to all registered services in router and achieve command injection vulnerability.

CVSS3: 5.5
fstec
около 1 года назад

Уязвимость обработчика NWS_PF_setMacAddrExceptionIP службы NetworkingService системы мультимедиа Mercedes-Benz User Experience (MBUX), позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 14%
0.00045
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-284