CVE-2018-9312
HIGHBMW Head Unit HU_NBT - Local Attack
Title source: llmDescription
The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows a local attack when a USB device is plugged in.
Scores
CVSS v3
7.8
EPSS
0.0015
EPSS Percentile
35.2%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-693
Status
published
Affected Products (1)
bmw/head_unit_hu_nbt_firmware
Timeline
Published
May 31, 2018
Tracked Since
Feb 18, 2026