Vulnerability · Published Feb 13, 2025 · Assigned by mitre
CVE-2024-37600
Medium 6.8
In plain English
A medium-severity stack buffer overflow in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 29% of all known vulnerabilities).
Official description
An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6 through 2021. A possible stack buffer overflow in the Service Broker service affects NTG 6 head units. To perform this attack, physical access to Ethernet pins of the head unit base board is needed. With a static IP address, an attacker can connect via the internal network to the Service Broker service. With prepared HTTP requests, an attacker can cause the Service-Broker service to fail.
Affected products (as reported)
Weakness: CWE-121 · Vector: CVSS:3.1/AC:L/AV:P/A:H/C:H/I:H/PR:N/S:U/UI:N