CVE-2024-37601

Summary

CVE-2024-37601 is a heap buffer overflow vulnerability affecting Mercedes Benz NTG (New Telematics Generation) 6 head units. This issue resides in the user data import/export function and can be exploited when an attacker gains local access to the USB interface of the car. Successful exploitation of this vulnerability causes the User-Data service to fail, leading to automatic restart of the failed service instance.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.