CVE-2024-37601

Katalog CVE

CVSS 4.6 · Medium EPSS 0,34%

Kerentanan Heap-based Buffer Overflow pada headunit ntg6 mercedes-benz user experience. Skor CVSS 3.1 4.6 (Medium) menurut CISA ADP.

Deskripsi (NVD)

An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6. A possible heap buffer overflow exists in the user data import/export function of NTG 6 head units. To perform this attack, local access to the USB interface of the car is needed. With prepared data, an attacker can cause the User-Data service to fail. The failed service instance will restart automatically.

Rincian

Terbit di NVD

13 Februari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

4.6 (Medium), sumber CISA ADP
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-122: Heap-based Buffer Overflow

EPSS (30 hari)

0,34% peluang dieksploitasi; lebih tinggi dari 25,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://securelist.com/mercedes-benz-head-unit-security-research/115218/ advisory pihak ketiga