CVSS: 3.5EPSS: 0%CPEs: 2EXPL: 0CVE-2020-16142
https://notcve.org/view.php?id=CVE-2020-16142
On Mercedes-Benz C Class AMG Premium Plus c220 BlueTec vehicles, the Bluetooth stack mishandles %x and %c format-string specifiers in a device name in the COMAND infotainment software. En los vehículos Mercedes-Benz C Class AMG Premium Plus c220 BlueTec, la pila de Bluetooth maneja inapropiadamente los especificadores de cadenas de formato %xy%c en un nombre de dispositivo en el software de infoentretenimiento COMAND • https://medium.com/%40reliable_lait_mouse_975/mercedes-comand-infotainment-improper-format-strings-handling-4c67063d744e • CWE-134: Use of Externally-Controlled Format String •
CVSS: 7.1EPSS: 0%CPEs: 2EXPL: 0CVE-2018-18070
https://notcve.org/view.php?id=CVE-2018-18070
An issue was discovered in Daimler Mercedes-Benz COMAND 17/13.0 50.12 on Mercedes-Benz C-Class 2018 vehicles. Defining or receiving a specific navigation route might cause the system to freeze and reboot after a few transmissions. When the system next starts, it tries to re-calculate the route, which will cause a boot loop. (Under certain circumstances, it is possible to quickly overwrite the malicious route to regain the stability of the system.) Se ha descubierto un problema en Daimler Mercedes-Benz COMAND 17/13.0 50.12 en vehículos Mercedes-Benz Clase C del 2018. • https://vuldb.com/?id.125080 • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •