{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-05-05T21:37:27.136","vulnerabilities":[{"cve":{"id":"CVE-2025-8321","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2025-07-30T01:15:26.233","lastModified":"2025-08-12T15:17:43.440","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Tesla Wall Connector Firmware Downgrade Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Tesla Wall Connector devices. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the firmware upgrade feature. The issue results from the lack of an anti-downgrade mechanism. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the device. Was ZDI-CAN-26299."},{"lang":"es","value":"Vulnerabilidad de degradación de Tesla Wall Connector Firmware. Esta vulnerabilidad permite a atacantes con presencia física ejecutar código arbitrario en las instalaciones afectadas de los dispositivos Tesla Wall Connector. No se requiere autenticación para explotar esta vulnerabilidad. La falla específica se encuentra en la función de actualización de firmware. El problema se debe a la falta de un mecanismo anti-degradación. Un atacante puede aprovechar esto, junto con otras vulnerabilidades, para ejecutar código en el contexto del dispositivo. Era ZDI-CAN-26299."}],"metrics":{"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.9}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-1328"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tesla:wall_connector_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"24.44.3","matchCriteriaId":"6EA3C822-7AC3-4E30-A843-9B8013295BBE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tesla:wall_connector:-:*:*:*:*:*:*:*","matchCriteriaId":"583D4B2D-6F23-440F-A8AF-224AC9AEED54"}]}]}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-712/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory"]}]}}]}