CVE-2021-23907: Mercedes-Benz Headunit NTG6 Mercedes-Benz User Experience

Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days.

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. The count in MultiSvGet, GetAttributes, and MultiSvSet is not checked in the HiQnet Protocol, leading to remote code execution.

Affected products

• Mercedes-Benz Headunit NTG6 Mercedes-Benz User Experience: version 2021 only

Published 2021-05-13. Last modified 2026-06-17.