CVE-2023-34406

An issue was discovered on Mercedes Benz NTG 6. A possible integer overflow exists in the user data import/export function of NTG (New Telematics Generation) 6 head units. To perform this attack, local access to USB interface of the car is needed. With prepared data, an attacker can cause the User-Data service to fail. The failed service instance will restart automatically.

• CWE-190

• https://securelist.com/mercedes-benz-head-unit-security-research/115218/Third Party Advisory

Published

Feb 13, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-3440Incorrect Default Permissions vulnerability in Hitachi JP1/P…7.8
• CVE-2023-34400Mercedes-Benz head-unit NTG6 contains functions to import or…7.5
• CVE-2023-34401Mercedes-Benz head-unit NTG6 contains functions to import or…3.7
• CVE-2023-34402Mercedes-Benz head-unit NTG6 contains functions to import or…7.7
• CVE-2023-34403Mercedes-Benz head-unit NTG6 has Ethernet pins on Base Board…4.9
• CVE-2023-34404Mercedes-Benz head-unit NTG6 has Ethernet pins on Base Board…4.9
• CVE-2023-34407OfflinePlayerService.exe in Harbinger Offline Player 4.0.6.0…7.5
• CVE-2023-34408DokuWiki before 2023-04-04a allows XSS via RSS titles.5.4
• CVE-2023-34409In Percona Monitoring and Management (PMM) server 2.x before…9.8
• CVE-2023-3441An issue has been discovered in GitLab EE/CE affecting all v…9.1
• CVE-2023-34410An issue was discovered in Qt before 5.15.15, 6.x before 6.2…5.3
• CVE-2023-34411The xml-rs crate before 0.8.14 for Rust and Crab allows a de…7.5