CVE-2023-34402: High severity mercedes-benz headunit ntg6 vulnerability
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside file is encapsulate another file, which service will drop during processing. Due to missed checks, attacker can achieve Arbitrary File Write with service speech rights.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-34402?
CVE-2023-34402 is rated as a high-severity vulnerability due to the potential for arbitrary file write with elevated privileges.
How do I fix CVE-2023-34402?
To fix CVE-2023-34402, ensure that you update the Mercedes-Benz NTG6 head unit to the latest firmware provided by the manufacturer.
What type of attack can CVE-2023-34402 enable?
CVE-2023-34402 can enable an attacker to achieve arbitrary file write, potentially compromising system integrity.
Which systems are affected by CVE-2023-34402?
CVE-2023-34402 specifically affects the Mercedes-Benz NTG6 head unit.
What are the implications of CVE-2023-34402?
The implications of CVE-2023-34402 include unauthorized access to sensitive data and potential manipulation of system settings.