CVE-2019-19556

Опубликовано: 16 нояб. 2020

Источник: nvd

CVSS3: 4.6

CVSS2: 2.1

EPSS Низкий

Описание

An authentication bypass in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with physical access to device hardware to obtain system information.

Ссылки

https://media.daimler.com/marsMediaSite/en/instance/ko/Mercedes-Benz-and-360-Group-to-join-forces-Mercedes-Benz-and-360-Group-with-its-Cyber-Security-Brain-work-together-to-strengthen-car-IT-security-for-industry.xhtml?oid=45208829
Exploit
Third Party Advisory
https://skygo.360.cn/archive/Security-Research-Report-on-Mercedes-Benz-Cars-en.pdf
Third Party Advisory
https://media.daimler.com/marsMediaSite/en/instance/ko/Mercedes-Benz-and-360-Group-to-join-forces-Mercedes-Benz-and-360-Group-with-its-Cyber-Security-Brain-work-together-to-strengthen-car-IT-security-for-industry.xhtml?oid=45208829
Exploit
Third Party Advisory
https://skygo.360.cn/archive/Security-Research-Report-on-Mercedes-Benz-Cars-en.pdf
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:harman:hermes:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 23%

0.00076

Низкий

4.6 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-cq67-hwq5-57hc

github

больше 3 лет назад