Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2018-18070 Details

Description

An issue was discovered in Daimler Mercedes-Benz COMAND 17/13.0 50.12 on Mercedes-Benz C-Class 2018 vehicles. Defining or receiving a specific navigation route might cause the system to freeze and reboot after a few transmissions. When the system next starts, it tries to re-calculate the route, which will cause a boot loop. (Under certain circumstances, it is possible to quickly overwrite the malicious route to regain the stability of the system.)

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.9 MEDIUMVector:CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://vuldb.com/?id.125080	CVE	Third Party Advisory
https://vuldb.com/?id.125080	[email protected]	Third Party Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-835	Loop with Unreachable Exit Condition ('Infinite Loop')	[email protected]

Affected Products

Product	Versions
mercedes-benz comand	17/13.0_50.12
CPE cpe:2.3:o:mercedes-benz:comand:17/13.0_50.12:::::::* Remediation No remediation found in references.
mercedes-benz c-class	2018 -
CPE cpe:2.3:h:mercedes-benz:c-class:2018:-:::::: Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Sep 13, 2021	Reanalysis	[email protected]
Oct 3, 2019	CWE Remap	[email protected]
Jan 11, 2019	Initial Analysis	[email protected]