VULNERABILITY INTELLIGENCE

CVE-2018-18071

CVSS score7.5 HIGH

EPSS probability1.41%

CISA KEVNot currently listed

Published2018-10-09

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

An issue was discovered in the Daimler Mercedes-Benz Me app 2.11.0-846 for iOS. The encrypted Connected Vehicle API data exchange between the app and a server might be intercepted. The app can be used to operate the Remote Parking Pilot, unlock the vehicle, or obtain sensitive information such as latitude, longitude, and direction of travel.

Weakness classification

CWE-319: Cleartext Transmission of Sensitive Information

Primary references

cve@mitre.org — Exploit, Third Party Advisory, VDB Entry
cve@mitre.org — Exploit, Technical Description, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Technical Description, Third Party Advisory