CVE-2021-23906: Mercedes-Benz User Experience

Medium severity, CVSS 6.8. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. A Message Length is not checked in the HiQnet Protocol, leading to remote code execution.

Affected products

• Mercedes-Benz Mercedes-Benz User Experience: up to and including 2021

Published 2021-05-13. Last modified 2026-06-17.