GCVE - cpe:2.3:h:bmw:head_unit_hu_nbt:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:bmw:head_unit_hu_nbt:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Bmw (`fd2184f8-a0b9-5841-8f82-66227fc72de9`)
Product	Head Unit Hu Nbt (`71dfd748-1e4e-592e-8f9d-f711e1d1abfc`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-9322`	not_vulnerable	2026-06-08 05:12:08.028187	Details available The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows local attacks involving the USB or OBD-II interface. An attacker can bypass the code-signing protection mechanism for firmware updates, and consequently obtain a root shell. Published: 2018-05-31T12:00:00.000Z Updated: 2024-08-05T07:17:52.269Z Open on db.gcve.eu Reference links https://keenlab.tencent.com/en/Experimental_Security_Assessment_of_BMW_Cars_by_KeenLab.pdf https://www.theregister.co.uk/2018/05/23/bmw_security_bugs/ http://www.securityfocus.com/bid/104258	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-9320`	not_vulnerable	2026-06-08 05:12:08.027652	Details available The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows a local attack when a USB device is plugged in. Published: 2018-05-31T12:00:00.000Z Updated: 2024-08-05T07:17:52.112Z Open on db.gcve.eu Reference links https://keenlab.tencent.com/en/Experimental_Security_Assessment_of_BMW_Cars_by_KeenLab.pdf https://www.theregister.co.uk/2018/05/23/bmw_security_bugs/ http://www.securityfocus.com/bid/104258	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-9314`	not_vulnerable	2026-06-08 05:12:08.026558	Details available The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows an attack by an attacker who has direct physical access. Published: 2018-05-31T12:00:00.000Z Updated: 2024-08-05T07:17:52.037Z Open on db.gcve.eu Reference links https://keenlab.tencent.com/en/Experimental_Security_Assessment_of_BMW_Cars_by_KeenLab.pdf https://www.theregister.co.uk/2018/05/23/bmw_security_bugs/ http://www.securityfocus.com/bid/104258	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-9313`	not_vulnerable	2026-06-08 05:12:08.026083	Details available The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows a remote attack via Bluetooth when in pairing mode, leading to a Head Unit reboot. Published: 2018-05-31T12:00:00.000Z Updated: 2024-08-05T07:17:51.795Z Open on db.gcve.eu Reference links https://keenlab.tencent.com/en/Experimental_Security_Assessment_of_BMW_Cars_by_KeenLab.pdf https://www.theregister.co.uk/2018/05/23/bmw_security_bugs/ http://www.securityfocus.com/bid/104258	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-9312`	not_vulnerable	2026-06-08 05:12:08.025615	Details available The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows a local attack when a USB device is plugged in. Published: 2018-05-31T12:00:00.000Z Updated: 2024-08-05T07:17:51.822Z Open on db.gcve.eu Reference links https://keenlab.tencent.com/en/Experimental_Security_Assessment_of_BMW_Cars_by_KeenLab.pdf https://www.theregister.co.uk/2018/05/23/bmw_security_bugs/ http://www.securityfocus.com/bid/104258	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.