How severe is CVE-2024-37600?

CVE-2024-37600 has a CVSS 3.x base score of 6.8, rated medium severity. It is exploitable over physical access with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.

Is CVE-2024-37600 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (25th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2024-37600?

CVE-2024-37600 affects Mercedes-benz Headunit Ntg6 Mercedes-benz User Experience. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2024-37600?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2024-37600 have an EU (EUVD) identifier?

Yes. CVE-2024-37600 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-4908.

When was CVE-2024-37600 published?

CVE-2024-37600 was published on 2025-02-13 and last updated on 2026-06-17.

CVE-2024-37600

CVE-2024-37600 is a medium-severity vulnerability in Mercedes-benz Headunit Ntg6 Mercedes-benz User Experience with a CVSS 3.x base score of 6.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-121.

Key facts

Severity: Medium (CVSS 3.x base score 6.8)
EPSS exploit prediction: 0% (25th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2025-4908
Weakness: CWE-121
Affected product: Mercedes-benz Headunit Ntg6 Mercedes-benz User Experience
Published: 2025-02-13
Last modified: 2026-06-17

Description

An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6 through 2021. A possible stack buffer overflow in the Service Broker service affects NTG 6 head units. To perform this attack, physical access to Ethernet pins of the head unit base board is needed. With a static IP address, an attacker can connect via the internal network to the Service Broker service. With prepared HTTP requests, an attacker can cause the Service-Broker service to fail.

Frequently asked questions

What is CVE-2024-37600?: An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6 through 2021. A possible stack buffer overflow in the Service Broker service affects NTG 6 head units. To perform this attack, physical access to Ethernet pins of the head unit base board is needed. With a static IP address, an attacker can connect via the internal network to the Service Broker service. With prepared HTTP requests, an attacker can cause the Service-Broker service to fail.
How severe is CVE-2024-37600?: CVE-2024-37600 has a CVSS 3.x base score of 6.8, rated medium severity. It is exploitable over physical access with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
Is CVE-2024-37600 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (25th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2024-37600?: CVE-2024-37600 affects Mercedes-benz Headunit Ntg6 Mercedes-benz User Experience. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2024-37600?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2024-37600 have an EU (EUVD) identifier?: Yes. CVE-2024-37600 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-4908.
When was CVE-2024-37600 published?: CVE-2024-37600 was published on 2025-02-13 and last updated on 2026-06-17.

References

https://securelist.com/mercedes-benz-head-unit-security-research/115218/

Affected products (1)

cpe:2.3:a:mercedes-benz:headunit_ntg6_mercedes-benz_user_experience:*:*:*:*:*:*:*:*

More vulnerabilities in Mercedes-benz Headunit Ntg6 Mercedes-benz User Experience

CVE-2023-34399 — Critical (CVSS 9.8): Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this…
CVE-2023-34402 — High (CVSS 7.7): Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside file is…
CVE-2023-34400 — High (CVSS 7.5): Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. In case of parsing file,…
CVE-2023-34398 — High (CVSS 7.5): Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this…
CVE-2023-34397 — High (CVSS 7.5): Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB. During parsing you can…
CVE-2023-34404 — Medium (CVSS 4.9): Mercedes-Benz head-unit NTG6 has Ethernet pins on Base Board to connect module CSB. Attacker can connect to these pins…

All CVEs affecting Mercedes-benz Headunit Ntg6 Mercedes-benz User Experience →

Other CWE-121 (Stack-based Buffer Overflow) vulnerabilities

CVE-2026-12848 — Critical (CVSS 10.0): GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and…
CVE-2026-12847 — Critical (CVSS 10.0): GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and…
CVE-2026-12846 — Critical (CVSS 10.0): GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and…
CVE-2026-12485 — Critical (CVSS 10.0): GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and…
CVE-2026-37541 — Critical (CVSS 10.0): Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_gvret.cpp, the length…
CVE-2026-42996 — Critical (CVSS 10.0): JS8Call through 2.3.1 and JS8Call-improved before 3.0 have a stack-based buffer overflow via a radio transmission of…

Browse all CWE-121 (Stack-based Buffer Overflow) vulnerabilities →