What’s Vulnerable › Vulnerabilities
CVE-2023-23590
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 26.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2023-01-15 · updated 2026-06-17
- Weakness: CWE-400
Description
Mercedes-Benz XENTRY Retail Data Storage 7.8.1 allows remote attackers to cause a denial of service (device restart) via an unauthenticated API request. The attacker must be on the same network as the device.
Affected products
References
- https://b2bconnect.mercedes-benz.com/gb/workshop-solutions/diagnosis/retail-data-storage
- https://medium.com/%40windsormoreira/xentry-retail-data-storage-v7-8-1-denial-of-service-cve-2023-23590-60b65f5fa358
- https://b2bconnect.mercedes-benz.com/gb/workshop-solutions/diagnosis/retail-data-storage
- https://medium.com/%40windsormoreira/xentry-retail-data-storage-v7-8-1-denial-of-service-cve-2023-23590-60b65f5fa358
Get alerted when CVE-2023-23590 or the next vulnerability affects your stack