Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run ScanHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
Get listed

automotive security5 MIN

Mercedes-Benz Infotainment Vulnerabilities: What Kaspersky Disclosed About First-Generation MBUX

Kaspersky’s Mercedes-Benz MBUX research concerned first-generation infotainment hardware and required substantial physical access—not a demonstrated remote hack of ordinary connected vehicles.

By CarCody Team

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Kaspersky disclosed details on January 20, 2025, about more than a dozen vulnerabilities in the first-generation Mercedes-Benz User Experience (MBUX) infotainment head unit. The reported weaknesses included denial of service, information disclosure, command injection, and privilege escalation. Researchers demonstrated potential effects including changes to vehicle-related settings, disabling anti-theft protections, and unlocking paid infotainment services.

The key qualification for owners is that this was not reported as a remote attack against connected Mercedes-Benz vehicles. Mercedes-Benz said exploitation required physical access to the vehicle interior, removal and opening of the head unit, and interaction through USB or specialized interfaces. The company also said the vulnerabilities had been patched and that newer MBUX versions were not affected.

As an Amazon Associate I earn from qualifying purchases.

The short answer for Mercedes-Benz owners

There is no evidence in the available reporting that this disclosure describes a remote internet attack against ordinary Mercedes-Benz drivers. The reported attack path required substantial physical access to the vehicle and its infotainment hardware.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

That makes the findings technically serious but materially different from a drive-by compromise over cellular connectivity, Wi-Fi, Bluetooth, or Mercedes-Benz online services. Mercedes-Benz told SecurityWeek that the affected vulnerabilities had been patched.

#1 Best Overall
12.25 to 12.3" Touch Screen Upgrade for Mercedes MBUX GLC X253 C253 (NTG6.0) | Android 13 64GB, Wireless CarPlay Android Auto, Backup Camera, Navigation, Netflix Spotify
  • ✅ Precision-Fit 12.3-inch HD Touch Screen Upgrade​ Tailored exclusively for Mercedes MBUX GLC X253 C253 (NTG6.0), this upgrade replaces your original 12.25-inch screen with a 12.3-inch high-definition capacitive touch display. Boasts responsive touch control, sharp image quality, and a wide viewing angle, elevating your in-car interface to a more immersive level.
  • ✅ Stable Android 13 & 64GB Ample Storage​ Powered by the reliable Android 13 operating system, paired with 64GB of internal storage. Ensures smooth app performance, fast loading times, and enough space to store offline maps, favorite apps, music, and videos—no lag or storage constraints during daily use.
  • ✅ Wireless CarPlay & Android Auto for Convenience​ Go cable-free with wireless Apple CarPlay and Android Auto support. Automatically connects to your smartphone when you start the car, syncing calls, messages, music, and navigation seamlessly. Keeps your cabin tidy and lets you stay focused on driving with hands-free operation.
  • ✅ All-in-One Navigation & Entertainment​ Features full-featured online/offline navigation (GPS + real-time updates) to keep you on track. Compatible with popular apps like Netflix, Spotify, Twitter, and Reddit, offering endless entertainment options for long drives or waiting times—turn your car into a mobile entertainment hub.
  • ✅ Backup Camera Compatibility for Safe Reversing​ Fully compatible with your Mercedes’ original or aftermarket backup camera. Delivers clear, real-time reverse images with minimal latency, helping you avoid obstacles and park with confidence—enhancing safety for you and those around you.

What MBUX is—and what was affected

MBUX stands for Mercedes-Benz User Experience, the infotainment and head-unit platform used in Mercedes-Benz vehicles. However, “MBUX” is not one universal hardware or software product. The platform has multiple generations, hardware revisions, software builds, markets, and vehicle applications.

The reported research targeted the first generation of MBUX. Mercedes-Benz said newer infotainment versions were not affected. The available reporting does not provide a complete list of affected models, model years, regions, software builds, or VIN ranges, so it would be misleading to label every MBUX-equipped Mercedes-Benz as vulnerable.

What Kaspersky disclosed

Kaspersky began releasing details about individual weaknesses affecting the first-generation MBUX head unit. The research built on earlier work by a Chinese research team that disclosed findings in 2021, according to SecurityWeek.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The reporting described more than a dozen separate vulnerabilities rather than one single flaw. The reported categories included:

  • Denial of service: conditions that could disrupt or disable infotainment functions.
  • Information disclosure: potential extraction of data from the system.
  • Command injection: weaknesses that could allow unauthorized commands to be introduced into affected components.
  • Privilege escalation: pathways for gaining higher permissions within the infotainment platform.

Kaspersky reportedly demonstrated that an attacker meeting the required access conditions could modify vehicle-related settings, disable anti-theft protections, and unlock paid infotainment services. These are research demonstrations and potential capabilities—not evidence that criminals used the vulnerabilities against customers.

Rank #2
Upgrade 12.25 to 12.3-inch Touch Screen for Mercedes MBUX GLC X253 C253 (NTG6.0) CarPlay Android Auto Android 14 Apps Navigation Netflix Spotify Twitter Reddit Games Backup Cameras (64GB)
  • DISPLAY: Massive 12.3-inch touch screen upgrade provides crystal clear visuals and responsive touch controls for enhanced navigation experience (OEM 10.25 inch without Touch)
  • COMPATIBILITY: Specifically designed for Mercedes GLC X253 C253 models equipped with MBUX NTG6.0 system for seamless integration
  • CONNECTIVITY: Features wireless CarPlay, Android Auto, and Wi-Fi capabilities for comprehensive smartphone integration
  • ENTERTAINMENT: Access popular apps including Netflix, Spotify, Twitter, Reddit, and various games directly through the interface
  • CAMERA INTEGRATION: Supports multiple camera views including backup camera and 360-degree camera functionality for improved visibility

How the reported attack would work

Mercedes-Benz said exploitation required a demanding physical-access chain:

  1. Gain access to the vehicle interior.
  2. Reach the infotainment head unit.
  3. Remove and open the unit.
  4. Connect through USB or a specialized interface.
  5. Exploit one or more software weaknesses.

This is fundamentally different from compromising a parked vehicle remotely. It also means that a casual attacker with an ordinary USB stick should not be assumed to be able to reproduce the research. The available reporting does not establish a simple, consumer-accessible exploit procedure.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Did the vulnerabilities allow steering, braking, or engine control?

Not according to the available reporting. The disclosed effects involved the infotainment platform, data, commands, settings, anti-theft protections, and paid services. The sources do not establish remote control of steering, braking, or the engine.

“Command injection” and “privilege escalation” are serious technical terms, but they do not automatically mean that an attacker can control every vehicle system. The evidence available for this disclosure does not support describing it as a safety-critical vehicle takeover.

Remote hack or physical hack?

Question What the available reporting supports
Remote internet compromise? Not established.
Physical access required? Yes, according to Mercedes-Benz.
Head-unit removal and opening required? Mercedes-Benz said yes.
USB or specialized interface involved? Yes.
Newer MBUX versions affected? Mercedes-Benz said no.
Active exploitation reported? Not established.
Remote steering, braking, or engine control demonstrated? Not established.

When Mercedes-Benz was notified

Mercedes-Benz said an external research team contacted the company in August 2022. SecurityWeek reported that the vulnerabilities received CVE identifiers in 2023 and 2024, before the public disclosure on January 20, 2025.

Rank #3
Car Radio for Mercedes Benz E Class W211 E200 CLS W219 2002-2009, [2G+64G]
  • 【Applicable Models】The car radio for Mercedes Benz E Class (2002-2009) W211 / E200 / E211 / E220 / E240 / E270 / E280 / E300 / E320 / E350 / E430 / E500 / E55AMG / E550 / E63AMG; G Class W463 (2001-2008); CLK Class W209 (2005-2006); CLS Class W219 (2001-2011). Plug and play, easy to install. Note: If your car has factory original car amplifier, please contact us before purchasing. (Please check your Car Model / Year / Shape of The Center Console).
  • 【The Latest Android System】This upgrade Mercedes Benz W211 car stereo comes with a 4-core CPU, 2GB RAM + 64GB ROM and the latest Android system, making the Mercedes Benz W211 radio performance even better. And the HD touch screen Mercedes W211 stereo covered with 2.5D tempered glass protection, not easy to scratch the screen.
  • 【Wired & Wireless Carplay & Android Auto】The Mercedes Benz E200 radio is convenient for you to integrate your smart phone via Wireless/Wired CarPlay or Android Auto function(Speed-pla), which allows you to make phone calls, access map navigation, and so on. And Siri or other voice assistants will help you voice control, totally hands free for safe driving.
  • 【Multi-Functions】Wi-Fi Hotspot Internet / Steering Wheel Control / Mirror Link / 26 Replaceable UI Themes / 1080P HD Video Playback / Split Screen / GPS Navigation / Bluetooth (Phonebook support, hands-free calling) / Music / FM RDS Radio / Online & Offline Maps / Dual USB Input / EQ Audio. Support Twitter / Facebook / Gtalk / Gmail and other apps.
  • 【Best Customer Service】We provide 7*24 hours of after-sales technical support to help you solve installation and operation problems. 30 days Money-Back Service, 24 months after sales support, if you have any questions about our Android radio for Mercedes Benz W219, please feel free to contact us.

Those dates should not be confused:

  • August 2022: Mercedes-Benz said researchers notified the company.
  • 2023 and 2024: CVE identifiers were reportedly assigned.
  • January 20, 2025: Kaspersky’s details became public.

The available reporting does not establish that these were zero-days, and it does not provide a reliable, complete identifier-by-identifier CVE table. A CVE number alone would also say little about practical risk without the affected component, required access, privileges, and patch status.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Were the flaws patched?

Mercedes-Benz said the security issues had been patched and that newer infotainment versions were not affected. The available sources do not identify a universal consumer software version, recall number, release bulletin, or single menu path that every owner can use to verify the fix.

For that reason, owners should verify their individual vehicle rather than rely only on the MBUX branding or a model year:

  • Contact Mercedes-Benz or an authorized dealer with the vehicle identification number (VIN).
  • Ask the dealer to identify the head-unit generation and confirm applicable software status.
  • Install official vehicle and infotainment updates offered through Mercedes-Benz’s authorized channels.
  • Do not remove or open the head unit yourself.
  • Tell a qualified technician about unauthorized aftermarket electronics, media adapters, diagnostic tools, or other modifications.
  • Be cautious about connecting unknown USB devices.

Mercedes-Benz’s statement that the vulnerabilities were patched does not by itself establish that every vehicle received the same update automatically. Dealer or manufacturer verification is the most reliable route, especially for used vehicles, fleet cars, and rental vehicles.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Who faces the most practical risk?

These are practical inferences from the documented access requirements, not a Mercedes-Benz risk rating. Risk is more relevant when a vehicle uses first-generation MBUX, an attacker can enter the cabin, the head unit can be accessed and worked on for an extended period, or the vehicle has outdated software or unauthorized hardware modifications.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4
12.3-inch Touch Screen Upgrade Car Stereo with Backup Camera for Mercedes MBUX GLC X253 C253 (NTG6.0) | Wireless CarPlay, Android Auto, Android 14, 128GB, WiFi, Navigation, Netflix, Spotify
  • 1. Precise Fit for GLC X253/C253 (NTG6.0) - Plug & Play​ Custom-engineered for Mercedes GLC X253/C253 with MBUX (NTG6.0) system, upgrading 7-inch factory screen to 12.3-inch HD touchscreen. 100% plug-and-play—no wire cutting, retains OEM functions (steering wheel control, MBUX compatibility) and 1-second dual-system switch, matching dashboard seamlessly.
  • 2. Android 14 & 128GB Storage - All-Round Entertainment​ Stable Android 14 OS with 128GB expandable storage. Access Google Play for Netflix/Spotify, Twitter/Reddit, games, and apps. Built-in WiFi & Bluetooth 5.2—stream HD media, play online games, and keep passengers entertained on long drives.
  • 3. Wireless CarPlay/Android Auto + GPS Navigation​ Wireless CarPlay/Android Auto (no cables) mirrors phone navigation, calls, music. Voice control (Siri/Google Assistant) ensures safe driving. High-precision GPS with real-time traffic and offline maps for accurate guidance anywhere.
  • 4.Backup Camera - Safe Maneuvering Integrated HD backup camera effectively eliminates rear blind spots for safer driving. Auto-activates in reverse with clear high-definition images and adjustable parking guide lines, featuring wide-angle correction and low-light enhancement for effortless parking and reversing, suitable for all driving skill levels.
  • 5. HD Touchscreen & Premium Quality​ 12.3-inch IPS HD touchscreen (1920×720) with anti-glare coating, vibrant colors, and ≤0.1s response. Made of durable ABS and scratch-resistant glass. Boosts interior luxury/tech feel, ideal for daily commuting, family trips, and road adventures.

Physical-access assumptions may also be more realistic for fleet and rental vehicles than for a privately garaged car. A vulnerability capable of disabling anti-theft protections is potentially relevant to theft scenarios, but the research does not establish a practical mass-theft method.

Risk is materially lower when the vehicle uses a newer MBUX generation, receives current manufacturer updates, has controlled physical access, and has no unauthorized modifications. Again, only Mercedes-Benz or an authorized dealer can confirm a particular vehicle’s generation and status from the available information.

What this disclosure does—and does not—mean

The findings show why an infotainment head unit must be treated as a security-sensitive computer rather than merely a radio or navigation screen. They also demonstrate the value of coordinated vulnerability disclosure and vendor patching.

They do not establish that all Mercedes-Benz vehicles were vulnerable, that all MBUX versions were affected, or that ordinary drivers could be hacked remotely. The available reporting also does not say that the vulnerabilities were being exploited in the wild, that Mercedes-Benz issued a safety recall, or that owners must stop driving.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Other Mercedes-Benz security stories should not be merged with this case. Earlier research into remotely exploitable automotive weaknesses and a separate leaked GitHub token involving software-development infrastructure concern different systems and do not change the physical-access requirements reported for this MBUX disclosure.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

automotive securitycar cybersecurityKasperskyMBUXMercedes-Benz

Read next

Thanks for visiting Carcody

Carcody.com is a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to amazon.co

Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.