Integer overflow in Mercedes-Benz Headunit Ntg6 User Experience
CVE-2023-34406
An issue was discovered on Mercedes Benz NTG 6. A possible integer overflow exists in the user data import/export function of NTG (New Telematics Generation) 6 head units. To perform this attack, local access to USB interface of the car is needed. With prepared data, an attacker can cause the User-Data service to fail. The failed service instance will restart automatically.
Vulnerability class: Integer Overflow
EPSS: 0.002 (12.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L.
Affected products
- Mercedes-benz Headunit_ntg6_mercedes-benz_user_experience
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Third Party Advisory)
Frequently asked questions
- What is CVE-2023-34406?
- CVE-2023-34406 is a low-severity vulnerability in Mercedes-Benz Headunit Ntg6 User Experience, classified under Integer Overflow or Wraparound. CVSS score: 3.3/10. Published 2025-02-13.
- How severe is CVE-2023-34406?
- Low severity. CVSS v3 base score is 3.3 out of 10.