CVEvulnerability
CVE-2018-18071
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-10-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-319
Description
An issue was discovered in the Daimler Mercedes-Benz Me app 2.11.0-846 for iOS. The encrypted Connected Vehicle API data exchange between the app and a server might be intercepted. The app can be used to operate the Remote Parking Pilot, unlock the vehicle, or obtain sensitive information such as latitude, longitude, and direction of travel.
Affected configurations
• mercedes-benz mercedes me 2.11.0
Related
Weakness · CWE (1)
- CWE-319 Cleartext Transmission of Sensitive Information weakness
References
- https://vuldb.com/?id.125081 Exploit, Third Party Advisory, VDB Entry
- https://www.scip.ch/en/?labs.20180405 Exploit, Technical Description, Third Party Advisory
- https://vuldb.com/?id.125081 Exploit, Third Party Advisory, VDB Entry
- https://www.scip.ch/en/?labs.20180405 Exploit, Technical Description, Third Party Advisory