PT-2025-1230 · Mercedes Benz · Mbux+1

Published 2025-01-17 · Updated 2025-02-18 · CVE-2023-34404

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Mercedes-Benz head-unit NTG6

Description The issue is related to the Mercedes-Benz head-unit NTG6, which has Ethernet pins on the Base Board to connect the module CSB. An attacker can connect to these pins and gain access to the internal network. By accessing a specific port, an attacker can send a call request to all registered services in the router, achieving command injection. Additionally, there is a vulnerability in the NWS PF setMacAddrExceptionIP handler of the NetworkingService in the Mercedes-Benz User Experience (MBUX) multimedia system, related to insufficient input validation when processing MAC addresses, which can allow an attacker to execute arbitrary commands.

Recommendations For Mercedes-Benz head-unit NTG6, consider restricting access to the Ethernet pins on the Base Board to prevent unauthorized connections to the internal network. As a temporary workaround, consider disabling the NWS PF setMacAddrExceptionIP handler function in the NetworkingService until a patch is available. Avoid using the specific port that allows an attacker to send a call request to all registered services in the router until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

RCE

Weakness Enumeration

CWE-284

CWE-20

Related Identifiers

BDU:2025-00609

CVE-2023-34404

Affected Products

Mbux

Mercedes-Benz Head-Unit Ntg6

References · 11

• https://bdu.fstec.ru/vul/2025-00609 · Security Note
• https://osv.dev/vulnerability/CVE-2023-34404 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-34404 · Security Note
• https://github.com/klsecservices/Advisories/blob/master/K-Mercedes-Benz-2023-009.md · Note
• https://t.me/cvenotify/111325 · Telegram Post
• https://twitter.com/CVEnew/status/1890170589614338199 · Twitter Post
• https://t.me/true_secator/6638 · Telegram Post
• https://twitter.com/BaseFortify/status/1891873938185040375 · Twitter Post
• https://keenlab.tencent.com/en/whitepapers/Mercedes_Benz_Security_Research_Report_Final.pdf · Note
• https://t.me/cvedetector/18060 · Telegram Post
• https://securelist.com/mercedes-benz-head-unit-security-research/115218 · Note