CVE-2021-23910

CRITICAL 9.8CVE-2021-23910 · Published 13/05/2021 · updated 17/06/2026

In short

CVE-2021-23910 is a CRITICAL (CVSS 9.8) vulnerability affecting hermes (mercedes-benz).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
hermes mercedes-benz	`= 2.1`	No fix yet

Description

An issue was discovered in HERMES 2.1 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. There is an out-of-bounds array access in RemoteDiagnosisApp.

References

keenlab.tencent.com/en/2021/05/12/Tencent-Security-Keen-Lab-Experimental-Security-Assessment-on-Mercedes-Benz-Cars · Third Party Advisory
keenlab.tencent.com/en/whitepapers/Mercedes_Benz_Security_Research_Report_Final.pdf · Exploit
media.daimler.com/marsMediaSite/en/instance/ko.xhtml · Third Party Advisory

More vulnerabilities in hermes

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free