CVE-2023-34400: Mercedes-Benz Headunit NTG6 Mercedes-Benz User Experience

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. In case of parsing file, service try to define header inside the file and convert it to null-terminated string. If character is missed, will return null pointer.

Affected products

• Mercedes-Benz Headunit NTG6 Mercedes-Benz User Experience: up to and including 2021

Published 2025-02-13. Last modified 2026-06-17.