Skip to content
OpenAdvisories
Medium · 4.9 CVE-2023-34403 EUVD-2023-38481GHSA-2x4h-9pj5-8p4x

Mercedes-Benz head-unit NTG6 has Ethernet pins on Base Board to connect module CSB. Attacker can connect to this pins and get access to int…

Published Feb 13, 2025 · Updated Mar 18, 2025 · Assigned by mitre

Description

Mercedes-Benz head-unit NTG6 has Ethernet pins on Base Board to connect module CSB. Attacker can connect to this pins and get access to internal network. A race condition can be acquired and attacker can spoof “UserData” with desirable file path and access it though backup on USB.

References