CVE-2018-18070

Severity: medium (CVSS 5.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-10-09 · updated 2026-06-17
Weakness: CWE-835

Description

An issue was discovered in Daimler Mercedes-Benz COMAND 17/13.0 50.12 on Mercedes-Benz C-Class 2018 vehicles. Defining or receiving a specific navigation route might cause the system to freeze and reboot after a few transmissions. When the system next starts, it tries to re-calculate the route, which will cause a boot loop. (Under certain circumstances, it is possible to quickly overwrite the malicious route to regain the stability of the system.)

Affected products

Mercedes-Benz Comand: 17/13.0_50.12

References

https://vuldb.com/?id.125080
https://vuldb.com/?id.125080

Get alerted when CVE-2018-18070 or the next vulnerability affects your stack