High severity7.5NVD Advisory· Published Jan 15, 2023· Updated Jun 17, 2026

CVE-2023-23590

Description

Mercedes-Benz XENTRY Retail Data Storage 7.8.1 allows remote attackers to cause a denial of service (device restart) via an unauthenticated API request. The attacker must be on the same network as the device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mercedes-Benz/XENTRY Retail Data Storagedescription
Mercedes-Benz/Xentry Retail Data Storage Firmware
cpe:2.3:o:mercedes-benz:xentry_retail_data_storage_firmware:7.8.1:*:*:*:*:*:*:*
Mercedes-Benz/XENTRY Retail Data Storagellm-fuzzy
Range: 7.8.1

Patches

Vulnerability mechanics

References

b2bconnect.mercedes-benz.com/gb/workshop-solutions/diagnosis/retail-data-storagenvdVendor Advisory
medium.com/%40windsormoreira/xentry-retail-data-storage-v7-8-1-denial-of-service-cve-2023-23590-60b65f5fa358nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.021
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000