Is CVE-2024-37600 actively exploited?

No active exploitation of CVE-2024-37600 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2024-37600 be exploited remotely?

No. CVE-2024-37600 requires physical access to exploit.

What is the CVSS score of CVE-2024-37600?

CVE-2024-37600 has a CVSS score of 6.8 (MEDIUM).

HOME VULNERABILITIESCVE-2024-37600

MEDIUM

CVE-2024-37600

CWE-121Published: February 13, 2025· Updated: Jun 17, 2026

6.8

CVSS v3.1

Official Description

An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6 through 2021. A possible stack buffer overflow in the Service Broker service affects NTG 6 head units. To perform this attack, physical access to Ethernet pins of the head unit base board is needed. With a static IP address, an attacker can connect via the internal network to the Service Broker service. With prepared HTTP requests, an attacker can cause the Service-Broker service to fail.

NVD Source

Technical Analysis

CVE-2024-37600 requires local access, meaning attackers must already have a foothold on the target system.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 6.8.