ByteOS Network

NVD Vulnerability Details :

CVE-2023-47392

Modified

Source-cve@mitre.org

Published At-22 Nov, 2023 | 07:15

Updated At-29 Aug, 2024 | 20:35

An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the carts of other users via sending a crafted add order request.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CPE Matches

mercedes-benz>>mercedes_me>>Versions up to 1.34.0(inclusive)

cpe:2.3:a:mercedes-benz:mercedes_me:*:*:*:*:*:iphone_os:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov
CWE-200	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
https://gist.github.com/wwwziziyu/d0ae135b8075f6db735d75135254e7a1	cve@mitre.org	Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History