CVE-2018-9314

MEDIUM

BMW Head Unit HU_NBT - Info Disclosure

Title source: llm

Description

The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows an attack by an attacker who has direct physical access.

Scores

CVSS v3 6.8
EPSS 0.0007
EPSS Percentile 22.2%
Attack Vector PHYSICAL
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-693
Status published

Affected Products (1)

bmw/head_unit_hu_nbt_firmware

Timeline

Published May 31, 2018
Tracked Since Feb 18, 2026