BMW's vulnerability profile centers on in-vehicle infotainment and telematics systems, including head units and control units that manage entertainment, navigation, and vehicle connectivity functions. Vulnerabilities affecting this vendor skew strongly toward critical-severity outcomes and recur through protection mechanism failures that affect the firmware and software layers of these embedded automotive systems. Defenders should treat BMW advisory updates for these systems as high-priority given the safety-critical context of vehicle electronics; live severity and exploitation counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Bmw over time
Signals from CVEs in this vendor scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-9318CRITICAL The Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW vehicles produced in 2012 through 2018, allows a remote attack via a cellular network. | May 31, 2018 | 9.8 | 30 | NO | NO |
CVE-2018-9311CRITICAL The Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW vehicles produced in 2012 through 2018, allows a remote attack via a cellular network. | May 31, 2018 | 9.8 | 30 | NO | NO |
CVE-2018-9312HIGH The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows a local | May 31, 2018 | 7.8 | 25 | NO | NO |
CVE-2018-9322HIGH The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows local at | May 31, 2018 | 7.8 | 24 | NO | NO |
CVE-2018-9320HIGH The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows a local | May 31, 2018 | 7.8 | 24 | NO | NO |
CVE-2018-9314MEDIUM The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows an attac | May 31, 2018 | 6.8 | 22 | NO | NO |
CVE-2018-9313MEDIUM The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows a remote | May 31, 2018 | 5.3 | 19 | NO | NO |
Signals from CVEs in this vendor scope (7 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Bmw.
Media articles that mention a CVE ID that affects a product developed by Bmw — matched by CVE ID, not by vendor name.