CVE-2019-19563

A misconfiguration in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with direct physical access to device hardware to obtain cellular modem information.

• https://media.daimler.com/marsMediaSite/en/instance/ko/Mercedes-Benz-and-360-Group-to-join-forces-Mercedes-Benz-and-360-Group-with-its-Cyber-Security-Brain-work-together-to-strengthen-car-IT-security-for-industry.xhtml?oid=45208829Third Party Advisory
• https://skygo.360.cn/archive/Security-Research-Report-on-Mercedes-Benz-Cars-en.pdfExploit, Third Party Advisory
• https://media.daimler.com/marsMediaSite/en/instance/ko/Mercedes-Benz-and-360-Group-to-join-forces-Mercedes-Benz-and-360-Group-with-its-Cyber-Security-Brain-work-together-to-strengthen-car-IT-security-for-industry.xhtml?oid=45208829Third Party Advisory
• https://skygo.360.cn/archive/Security-Research-Report-on-Mercedes-Benz-Cars-en.pdfExploit, Third Party Advisory

Published

Nov 16, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-19556An authentication bypass in the debug interface in Mercedes-…4.6
• CVE-2019-19557A misconfiguration in the debug interface in Mercedes-Benz H…2.4
• CVE-2019-1956A vulnerability in the web-based interface of the Cisco SPA1…4.8
• CVE-2019-19560An authentication bypass in the debug interface in Mercedes-…4.6
• CVE-2019-19561A misconfiguration in the debug interface in Mercedes-Benz H…2.4
• CVE-2019-19562An authentication bypass in the debug interface in Mercedes-…4.6
• CVE-2019-1957A vulnerability in the web interface of Cisco IoT Field Netw…7.5
• CVE-2019-19576class.upload.php in verot.net class.upload before 1.0.3 and …9.8
• CVE-2019-19577An issue was discovered in Xen through 4.12.x allowing x86 A…7.2
• CVE-2019-19578An issue was discovered in Xen through 4.12.x allowing x86 P…8.8
• CVE-2019-19579An issue was discovered in Xen through 4.12.x allowing attac…6.8
• CVE-2019-1958A vulnerability in the web-based management interface of Cis…8.8