CVE-2018-18070: High severity mercedes-benz comand vulnerability

Published Oct 9, 2018

Updated

An issue was discovered in Daimler Mercedes-Benz COMAND 17/13.0 50.12 on Mercedes-Benz C-Class 2018 vehicles. Defining or receiving a specific navigation route might cause the system to freeze and reboot after a few transmissions. When the system next starts, it tries to re-calculate the route, which will cause a boot loop. (Under certain circumstances, it is possible to quickly overwrite the malicious route to regain the stability of the system.)

Affected Software

2 affected components

Mercedes-Benz COMAND=17\/13.0_50.12

Mercedes-Benz C-Class=2018

Event History

Oct 9, 2018

CVE Published

via MITRE·09:00 AM

Data Sourced

via MITRE·09:00 AM

Description

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2018-18070.

What software versions are affected by this vulnerability?

Daimler Mercedes-Benz COMAND 17/13.0 50.12 on Mercedes-Benz C-Class 2018 vehicles is affected.

What is the severity of CVE-2018-18070?

The severity of CVE-2018-18070 is high.

How does this vulnerability manifest?

Defining or receiving a specific navigation route might cause the system to freeze and reboot after a few transmissions.

Is there a fix available for this vulnerability?

Please refer to the vendor for a fix or patch for this vulnerability.