CVE-2019-19560

Опубликовано: 16 нояб. 2020

Источник: nvd

CVSS3: 4.6

CVSS2: 2.1

EPSS Низкий

Описание

An authentication bypass in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with physical access to device hardware to obtain system information.

Ссылки

https://media.daimler.com/marsMediaSite/en/instance/ko/Mercedes-Benz-and-360-Group-to-join-forces-Mercedes-Benz-and-360-Group-with-its-Cyber-Security-Brain-work-together-to-strengthen-car-IT-security-for-industry.xhtml?oid=45208829
Third Party Advisory
https://skygo.360.cn/archive/Security-Research-Report-on-Mercedes-Benz-Cars-en.pdf
Exploit
Third Party Advisory
https://media.daimler.com/marsMediaSite/en/instance/ko/Mercedes-Benz-and-360-Group-to-join-forces-Mercedes-Benz-and-360-Group-with-its-Cyber-Security-Brain-work-together-to-strengthen-car-IT-security-for-industry.xhtml?oid=45208829
Third Party Advisory
https://skygo.360.cn/archive/Security-Research-Report-on-Mercedes-Benz-Cars-en.pdf
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:harman:hermes:1.5:*:*:*:*:*:*:*

EPSS

Процентиль: 21%

0.0007

Низкий

4.6 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-jw84-vv6f-rfg8

github

больше 3 лет назад