CVE-2023-23590

HIGH 7.5CVE-2023-23590 · Published 15/01/2023 · updated 17/06/2026

In short

CVE-2023-23590 is a HIGH (CVSS 7.5) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 26.4%, higher than 98.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Mercedes-Benz XENTRY Retail Data Storage 7.8.1 allows remote attackers to cause a denial of service (device restart) via an unauthenticated API request. The attacker must be on the same network as the device.

References

b2bconnect.mercedes-benz.com/gb/workshop-solutions/diagnosis/retail-data-storage · Vendor Advisory
medium.com/%40windsormoreira/xentry-retail-data-storage-v7-8-1-denial-of-service-cve-2023-23590-60b65f5fa358

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free