CVE-2023-34402
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside file is encapsulate another file, which service will drop during processing…
Published: 2025-02-13 · CVSS: 7.7 · CVSS 3.1
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside file is encapsulate another file, which service will drop during processing. Due to missed checks, attacker can achieve Arbitrary File Write with service speech rights.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7