CVE-2018-18071

An issue was discovered in the Daimler Mercedes-Benz Me app 2.11.0-846 for iOS. The encrypted Connected Vehicle API data exchange between the app and a server might be intercepted. The app can be used to operate the Remote Parking Pilot, unlock the vehicle, or obtain sensitive information such as latitude, longitude, and direction of travel.

• CWE-319

• https://vuldb.com/?id.125081Exploit, Third Party Advisory, VDB Entry
• https://www.scip.ch/en/?labs.20180405Exploit, Technical Description, Third Party Advisory
• https://vuldb.com/?id.125081Exploit, Third Party Advisory, VDB Entry
• https://www.scip.ch/en/?labs.20180405Exploit, Technical Description, Third Party Advisory

Published

Oct 9, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-18064cairo through 1.15.14 has an out-of-bounds stack-memory writ…6.5
• CVE-2018-18065_set_key in agent/helpers/table_container.c in Net-SNMP befo…
• CVE-2018-18066snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.…7.5
• CVE-2018-18068The ARM-based hardware debugging feature on Raspberry Pi 3 m…
• CVE-2018-18069process_forms in the WPML (aka sitepress-multilingual-cms) p…
• CVE-2018-18070An issue was discovered in Daimler Mercedes-Benz COMAND 17/1…5.9
• CVE-2018-18073Artifex Ghostscript allows attackers to bypass a sandbox pro…6.3
• CVE-2018-18074The Requests package before 2.20.0 for Python sends an HTTP …7.5
• CVE-2018-18075WikidForum 2.20 has SQL Injection via the rpc.php parent_pos…
• CVE-2018-1808IBM WebSphere Commerce 9.0.0.0 through 9.0.0.6 could allow s…4.3
• CVE-2018-18082XSS exists in Waimai Super Cms 20150505 via the fname parame…
• CVE-2018-18083An issue was discovered in DuomiCMS 3.0. Remote PHP code exe…