Security Advisory

CVE-2018-18071

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-10-09 09:00:00
Last updated 2024-09-17 02:32:27
Assigner mitre
State PUBLISHED

Description

An issue was discovered in the Daimler Mercedes-Benz Me app 2.11.0-846 for iOS. The encrypted Connected Vehicle API data exchange between the app and a server might be intercepted. The app can be used to operate the Remote Parking Pilot, unlock the vehicle, or obtain sensitive information such as latitude, longitude, and direction of travel.