CVE-2023-47393

An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the maintenance orders of other users and access sensitive user information via unspecified vectors.
References
Configurations

Configuration 1 (hide)

cpe:2.3:a:mercedes-benz:mercedes_me:*:*:*:*:*:iphone_os:*:*

History

29 Nov 2023, 18:02

Type Values Removed Values Added
CPE cpe:2.3:a:mercedes-benz:mercedes_me:*:*:*:*:*:iphone_os:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.3
First Time Mercedes-benz
Mercedes-benz mercedes Me
CWE NVD-CWE-noinfo
References () https://gist.github.com/wwwziziyu/7dbf7fd43f9e304ce0819f8a9784d2c6 - () https://gist.github.com/wwwziziyu/7dbf7fd43f9e304ce0819f8a9784d2c6 - Third Party Advisory

22 Nov 2023, 07:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-11-22 07:15

Updated : 2024-09-04 19:35


NVD link : CVE-2023-47393

Mitre link : CVE-2023-47393


JSON object : View

Products Affected

mercedes-benz

  • mercedes_me