CVE-2023-23590: High severity mercedes-benz xentry retail data storage vulnerability
Published Jan 15, 2023
·Updated
Mercedes-Benz XENTRY Retail Data Storage 7.8.1 allows remote attackers to cause a denial of service (device restart) via an unauthenticated API request. The attacker must be on the same network as the device.
Affected Software
4 affected components
Mercedes-Benz Xentry Retail Data Storage Firmware=7.8.1
Mercedes-Benz XENTRY Retail Data Storage
All of the following
Mercedes-Benz Xentry Retail Data Storage Firmware=7.8.1
Mercedes-Benz XENTRY Retail Data Storage
Event History
Jan 15, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID of Mercedes-Benz XENTRY Retail Data Storage?
The vulnerability ID of Mercedes-Benz XENTRY Retail Data Storage is CVE-2023-23590.
2
What is the severity rating of CVE-2023-23590?
CVE-2023-23590 has a severity rating of 7.5 (high).
3
How can remote attackers exploit CVE-2023-23590?
Remote attackers can exploit CVE-2023-23590 to cause a denial of service (device restart) via an unauthenticated API request.
4
What is the affected software version of Mercedes-Benz XENTRY Retail Data Storage?
The affected software version of Mercedes-Benz XENTRY Retail Data Storage is 7.8.1.
5
How can I fix the CVE-2023-23590 vulnerability?
To fix the CVE-2023-23590 vulnerability, it is recommended to update Mercedes-Benz XENTRY Retail Data Storage to a patched version.