What’s Vulnerable › Vulnerabilities

CVE-2023-34402

• Severity: high (CVSS 7.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-13 · updated 2026-06-17
• Weakness: CWE-787

Description

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside file is encapsulate another file, which service will drop during processing. Due to missed checks, attacker can achieve Arbitrary File Write with service speech rights.

Affected products

• Mercedes-Benz Headunit Ntg6 Mercedes-Benz User Experience: through 2021

References

• https://securelist.com/mercedes-benz-head-unit-security-research/115218/

Get alerted when CVE-2023-34402 or the next vulnerability affects your stack