CVE-2019-19557

A misconfiguration in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with direct physical access to device hardware to obtain cellular modem information.

• CWE-922

• https://media.daimler.com/marsMediaSite/en/instance/ko/Mercedes-Benz-and-360-Group-to-join-forces-Mercedes-Benz-and-360-Group-with-its-Cyber-Security-Brain-work-together-to-strengthen-car-IT-security-for-industry.xhtml?oid=45208829Third Party Advisory
• https://skygo.360.cn/archive/Security-Research-Report-on-Mercedes-Benz-Cars-en.pdfExploit, Third Party Advisory
• https://media.daimler.com/marsMediaSite/en/instance/ko/Mercedes-Benz-and-360-Group-to-join-forces-Mercedes-Benz-and-360-Group-with-its-Cyber-Security-Brain-work-together-to-strengthen-car-IT-security-for-industry.xhtml?oid=45208829Third Party Advisory
• https://skygo.360.cn/archive/Security-Research-Report-on-Mercedes-Benz-Cars-en.pdfExploit, Third Party Advisory

Published

Nov 16, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-19550Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and…7.5
• CVE-2019-19551In userman 13.0.76.43 through 15.0.20 in Sangoma FreePBX, XS…4.8
• CVE-2019-19552In userman 13.0.76.43 through 15.0.20 in Sangoma FreePBX, XS…4.8
• CVE-2019-19553In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dis…7.5
• CVE-2019-19555read_textobject in read.c in Xfig fig2dev 3.2.7b has a stack…5.5
• CVE-2019-19556An authentication bypass in the debug interface in Mercedes-…4.6
• CVE-2019-1956A vulnerability in the web-based interface of the Cisco SPA1…4.8
• CVE-2019-19560An authentication bypass in the debug interface in Mercedes-…4.6
• CVE-2019-19561A misconfiguration in the debug interface in Mercedes-Benz H…2.4
• CVE-2019-19562An authentication bypass in the debug interface in Mercedes-…4.6
• CVE-2019-19563A misconfiguration in the debug interface in Mercedes-Benz H…2.4
• CVE-2019-1957A vulnerability in the web interface of Cisco IoT Field Netw…7.5