CVE-2019-19561

A misconfiguration in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with direct physical access to device hardware to obtain cellular modem information.

Score

CVSS 3.1 2.4 Low

Status

Modified - cve@mitre.org

Published

2020-11-16

Last modified

2024-08-05

Weaknesses

CWE-922

Affected products

• Hermes (Harman)

References

• https://media.daimler.com/marsMediaSite/en/instance/ko/Mercedes-Benz-and-360-Group-to-join-forces-Mercedes-Benz-and-360…
• https://skygo.360.cn/archive/Security-Research-Report-on-Mercedes-Benz-Cars-en.pdf