GCVE - cpe:2.3:o:bmw:head_unit_hu_nbt_firmware:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:bmw:head_unit_hu_nbt_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

Vendor	Bmw (`fd2184f8-a0b9-5841-8f82-66227fc72de9`)
Product	Head Unit Hu Nbt Firmware (`fc4cbc61-1e1e-5d23-9712-cf744e8d0030`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-9322`	vulnerable	2026-06-08 05:12:08.028165	Details available The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows local attacks involving the USB or OBD-II interface. An attacker can bypass the code-signing protection mechanism for firmware updates, and consequently obtain a root shell. Published: 2018-05-31T12:00:00.000Z Updated: 2024-08-05T07:17:52.269Z Open on db.gcve.eu Reference links https://keenlab.tencent.com/en/Experimental_Security_Assessment_of_BMW_Cars_by_KeenLab.pdf https://www.theregister.co.uk/2018/05/23/bmw_security_bugs/ http://www.securityfocus.com/bid/104258	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-9320`	vulnerable	2026-06-08 05:12:08.027521	Details available The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows a local attack when a USB device is plugged in. Published: 2018-05-31T12:00:00.000Z Updated: 2024-08-05T07:17:52.112Z Open on db.gcve.eu Reference links https://keenlab.tencent.com/en/Experimental_Security_Assessment_of_BMW_Cars_by_KeenLab.pdf https://www.theregister.co.uk/2018/05/23/bmw_security_bugs/ http://www.securityfocus.com/bid/104258	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-9314`	vulnerable	2026-06-08 05:12:08.026533	Details available The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows an attack by an attacker who has direct physical access. Published: 2018-05-31T12:00:00.000Z Updated: 2024-08-05T07:17:52.037Z Open on db.gcve.eu Reference links https://keenlab.tencent.com/en/Experimental_Security_Assessment_of_BMW_Cars_by_KeenLab.pdf https://www.theregister.co.uk/2018/05/23/bmw_security_bugs/ http://www.securityfocus.com/bid/104258	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-9313`	vulnerable	2026-06-08 05:12:08.026057	Details available The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows a remote attack via Bluetooth when in pairing mode, leading to a Head Unit reboot. Published: 2018-05-31T12:00:00.000Z Updated: 2024-08-05T07:17:51.795Z Open on db.gcve.eu Reference links https://keenlab.tencent.com/en/Experimental_Security_Assessment_of_BMW_Cars_by_KeenLab.pdf https://www.theregister.co.uk/2018/05/23/bmw_security_bugs/ http://www.securityfocus.com/bid/104258	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-9312`	vulnerable	2026-06-08 05:12:08.025051	Details available The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows a local attack when a USB device is plugged in. Published: 2018-05-31T12:00:00.000Z Updated: 2024-08-05T07:17:51.822Z Open on db.gcve.eu Reference links https://keenlab.tencent.com/en/Experimental_Security_Assessment_of_BMW_Cars_by_KeenLab.pdf https://www.theregister.co.uk/2018/05/23/bmw_security_bugs/ http://www.securityfocus.com/bid/104258	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.