CVE-2021-23907

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. The count in MultiSvGet, GetAttributes, and MultiSvSet is not checked in the HiQnet Protocol, leading to remote code execution.

• https://keenlab.tencent.com/en/2021/05/12/Tencent-Security-Keen-Lab-Experimental-Security-Assessment-on-Mercedes-Benz-Cars/Third Party Advisory
• https://keenlab.tencent.com/en/whitepapers/Mercedes_Benz_Security_Research_Report_Final.pdfExploit, Third Party Advisory
• https://media.daimler.com/marsMediaSite/en/instance/ko.xhtml?oid=49946866Third Party Advisory
• https://keenlab.tencent.com/en/2021/05/12/Tencent-Security-Keen-Lab-Experimental-Security-Assessment-on-Mercedes-Benz-Cars/Third Party Advisory
• https://keenlab.tencent.com/en/whitepapers/Mercedes_Benz_Security_Research_Report_Final.pdfExploit, Third Party Advisory
• https://media.daimler.com/marsMediaSite/en/instance/ko.xhtml?oid=49946866Third Party Advisory

Published

May 13, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-23897Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-23899OWASP json-sanitizer before 1.2.2 may emit closing SCRIPT ta…9.8
• CVE-2021-2390Vulnerability in the MySQL Server product of Oracle MySQL (c…5.9
• CVE-2021-23900OWASP json-sanitizer before 1.2.2 can output invalid JSON or…7.5
• CVE-2021-23901An XML external entity (XXE) injection vulnerability was dis…9.1
• CVE-2021-23906An issue was discovered in the Headunit NTG6 in the MBUX Inf…6.8
• CVE-2021-23908An issue was discovered in the Headunit NTG6 in the MBUX Inf…9.8
• CVE-2021-23909An issue was discovered in HERMES 2.1 in the MBUX Infotainme…9.8
• CVE-2021-2391Vulnerability in the Oracle BI Publisher product of Oracle F…8.8
• CVE-2021-23910An issue was discovered in HERMES 2.1 in the MBUX Infotainme…9.8
• CVE-2021-2392Vulnerability in the Oracle BI Publisher product of Oracle F…8.8
• CVE-2021-23921An issue was discovered in Devolutions Server before 2020.3.…9.1