CVE-2020-16142: Mercedes-Benz Comand

Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days.

On Mercedes-Benz C Class AMG Premium Plus c220 BlueTec vehicles, the Bluetooth stack mishandles %x and %c format-string specifiers in a device name in the COMAND infotainment software.

Affected products

• Mercedes-Benz Comand: affected versions not specified

Published 2020-08-27. Last modified 2026-06-17.