CVE-2023-34404

Mercedes-Benz head-unit NTG6 has Ethernet pins on Base Board to connect module CSB. Attacker can connect to these pins and get access to internal network. As a result, by accessing a specific port an attacker can send call request to all registered services in router and achieve command injection vulnerability.

• CWE-284

• https://securelist.com/mercedes-benz-head-unit-security-research/115218/Third Party Advisory

Published

Feb 13, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-34399Mercedes-Benz head-unit NTG6 contains functions to import or…9.8
• CVE-2023-3440Incorrect Default Permissions vulnerability in Hitachi JP1/P…7.8
• CVE-2023-34400Mercedes-Benz head-unit NTG6 contains functions to import or…7.5
• CVE-2023-34401Mercedes-Benz head-unit NTG6 contains functions to import or…3.7
• CVE-2023-34402Mercedes-Benz head-unit NTG6 contains functions to import or…7.7
• CVE-2023-34403Mercedes-Benz head-unit NTG6 has Ethernet pins on Base Board…4.9
• CVE-2023-34406An issue was discovered on Mercedes Benz NTG 6. A possible i…3.3
• CVE-2023-34407OfflinePlayerService.exe in Harbinger Offline Player 4.0.6.0…7.5
• CVE-2023-34408DokuWiki before 2023-04-04a allows XSS via RSS titles.5.4
• CVE-2023-34409In Percona Monitoring and Management (PMM) server 2.x before…9.8
• CVE-2023-3441An issue has been discovered in GitLab EE/CE affecting all v…9.1
• CVE-2023-34410An issue was discovered in Qt before 5.15.15, 6.x before 6.2…5.3