{"resultsPerPage":24,"startIndex":0,"totalResults":24,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-16T18:42:05.682","vulnerabilities":[{"cve":{"id":"CVE-2016-9337","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2017-02-13T21:59:01.610","lastModified":"2026-06-17T00:55:50.747","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in Tesla Motors Model S automobile, all firmware versions before version 7.1 (2.36.31) with web browser functionality enabled. The vehicle's Gateway ECU is susceptible to commands that may allow an attacker to install malicious software allowing the attacker to send messages to the vehicle's CAN bus, a Command Injection."},{"lang":"es","value":"Ha sido descubierto un problema en Tesla Motors Model S automobile, todas las versiones de firmware anteriores a la versión 7.1 (2.36.31) con funcionalidad de navegador web habilitada. La Gateway ECU del vehículo es susceptible a comandos que pueden permitir a un atacante instalar software malicioso permitiendo al atacante enviar mensajes al CAN bus del vehículo, una inyección de Comandos."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"Tesla Gateway ECU on Model S automobile","versions":[{"version":"Tesla Gateway ECU on Model S automobile","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-77"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tesla:gateway_ecu:-:*:*:*:*:*:*:*","matchCriteriaId":"85A3BB9F-CEFC-43D3-85AD-61FCE98904E8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/94697","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-341-01","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/94697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-341-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2019-9977","sourceIdentifier":"cve@mitre.org","published":"2019-03-24T14:29:00.270","lastModified":"2026-06-17T02:44:58.013","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The renderer process in the entertainment system on Tesla Model 3 vehicles mishandles JIT compilation, which allows attackers to trigger firmware code execution, and display a crafted message to vehicle occupants."},{"lang":"es","value":"El proceso renderer en el sistema de entretenimiento en los vehículos de Tesla modelo 3 gestiona de manera incorrecta la compilación JIT, lo que permite que los atacantes desencadenen la ejecución de código del firmware y muestren un mensaje manipulado a los ocupantes del vehículo."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tesla:model_3_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"7310A3BA-56B9-4A82-A4B8-65ACA3C3D024"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tesla:model_3:-:*:*:*:*:*:*:*","matchCriteriaId":"825A79FD-C872-4564-9782-83BEEADDF5D9"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/107551","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://twitter.com/thezdi/status/1109218603251859456","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.zdnet.com/article/tesla-car-hacked-at-pwn2own-contest/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/107551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://twitter.com/thezdi/status/1109218603251859456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.zdnet.com/article/tesla-car-hacked-at-pwn2own-contest/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2020-10558","sourceIdentifier":"cve@mitre.org","published":"2020-03-20T19:15:12.657","lastModified":"2026-06-17T02:48:00.070","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The driving interface of Tesla Model 3 vehicles in any release before 2020.4.10 allows Denial of Service to occur due to improper process separation, which allows attackers to disable the speedometer, web browser, climate controls, turn signal visual and sounds, navigation, autopilot notifications, along with other miscellaneous functions from the main screen."},{"lang":"es","value":"La interfaz de manejo de Tesla Model 3 en cualquier versión anterior a 2020.4.10, permite que se presente una Denegación de Servicio debido a una separación del proceso inapropiada, que permite a atacantes deshabilitar el velocímetro, navegador web, controles climáticos, señal de giro visual y sonidos, navegación, notificaciones de piloto automático, en conjunto con otras funciones diversas desde la pantalla principal."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tesla:model_3_web_interface:*:*:*:*:*:*:*:*","versionEndExcluding":"2020.4.10","matchCriteriaId":"1E4E4A15-286F-4426-8829-D18CB3A12B6B"}]}]}],"references":[{"url":"https://cylect.io/blog/Tesla_Model_3_Vuln/","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://safekeepsecurity.com/about/cve-2020-10558/","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://cylect.io/blog/Tesla_Model_3_Vuln/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://safekeepsecurity.com/about/cve-2020-10558/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2020-15912","sourceIdentifier":"cve@mitre.org","published":"2020-07-23T15:15:12.040","lastModified":"2026-06-17T02:57:23.603","vulnStatus":"Modified","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"Tesla Model 3 vehicles allow attackers to open a door by leveraging access to a legitimate key card, and then using NFC Relay. NOTE: the vendor has developed Pin2Drive to mitigate this issue"},{"lang":"es","value":"**EN DISPUTA** Los vehículos Tesla Model 3, permiten a atacantes abrir una puerta al aprovechar el acceso a una tarjeta de acceso legítima y luego usar el NFC Relay. NOTA: el proveedor ha desarrollado Pin2Drive para mitigar este problema"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:P/A:N","baseScore":3.3,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-06-11T16:25:07.278236Z","id":"CVE-2020-15912","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tesla:model_3_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"7310A3BA-56B9-4A82-A4B8-65ACA3C3D024"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tesla:model_3:-:*:*:*:*:*:*:*","matchCriteriaId":"825A79FD-C872-4564-9782-83BEEADDF5D9"}]}]}],"references":[{"url":"https://cansecwest.com/post/2020-03-09-22:00:00_2020_Speakers","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://twitter.com/Kevin2600/status/1218892338182836224","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.carhackingvillage.com/speaker-bios#htm3nrr","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://www.youtube.com/watch?v=VYKsfgox-bs","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.youtube.com/watch?v=kQWg-Ywv3S4","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.youtube.com/watch?v=nn-_3AbtEkI","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://cansecwest.com/post/2020-03-09-22:00:00_2020_Speakers","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://twitter.com/Kevin2600/status/1218892338182836224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.carhackingvillage.com/speaker-bios#htm3nrr","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.youtube.com/watch?v=VYKsfgox-bs","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.youtube.com/watch?v=kQWg-Ywv3S4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.youtube.com/watch?v=nn-_3AbtEkI","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2020-29438","sourceIdentifier":"cve@mitre.org","published":"2020-11-30T22:15:10.903","lastModified":"2026-06-17T03:11:16.597","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Tesla Model X vehicles before 2020-11-23 have key fobs that accept firmware updates without signature verification. This allows attackers to construct firmware that retrieves an unlock code from a secure enclave chip."},{"lang":"es","value":"Los vehículos Tesla Model X anterior al 23-11-2020 tienen llaveros que aceptan actualizaciones de firmware sin verificación de firma. Esto permite a atacantes construir firmware que recupere un código de desbloqueo de un chip de enclave seguro"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:P/I:N/A:N","baseScore":3.3,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-347"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tesla:model_x_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2020-11-23","matchCriteriaId":"9F6172D4-78B1-451A-A1CD-D83E8514C3F6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tesla:model_x:-:*:*:*:*:*:*:*","matchCriteriaId":"C550FF8A-58ED-4265-B33F-10AFDEA95519"}]}]}],"references":[{"url":"https://www.wired.com/story/tesla-model-x-hack-bluetooth/","source":"cve@mitre.org","tags":["Exploit","Press/Media Coverage","Third Party Advisory"]},{"url":"https://www.wired.com/story/tesla-model-x-hack-bluetooth/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Press/Media Coverage","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2020-29439","sourceIdentifier":"cve@mitre.org","published":"2020-11-30T22:15:10.963","lastModified":"2026-06-17T03:11:16.703","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Tesla Model X vehicles before 2020-11-23 have key fobs that rely on five VIN digits for the authentication needed for a body control module (BCM) to initiate a Bluetooth wake-up action. (The full VIN is visible from outside the vehicle.)"},{"lang":"es","value":"Los vehículos Tesla Model X anterior al 23-11-2020 tienen llaveros que dependen de cinco dígitos VIN para la autenticación necesaria para que un módulo de control de carrocería (BCM) inicie una acción de activación de Bluetooth. (El VIN completo es visible desde el exterior del vehículo)"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tesla:model_x_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2020-11-23","matchCriteriaId":"9F6172D4-78B1-451A-A1CD-D83E8514C3F6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tesla:model_x:-:*:*:*:*:*:*:*","matchCriteriaId":"C550FF8A-58ED-4265-B33F-10AFDEA95519"}]}]}],"references":[{"url":"https://www.wired.com/story/tesla-model-x-hack-bluetooth/","source":"cve@mitre.org","tags":["Exploit","Press/Media Coverage","Third Party Advisory"]},{"url":"https://www.wired.com/story/tesla-model-x-hack-bluetooth/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Press/Media Coverage","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2020-29440","sourceIdentifier":"cve@mitre.org","published":"2020-11-30T22:15:11.010","lastModified":"2026-06-17T03:11:16.810","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Tesla Model X vehicles before 2020-11-23 do not perform certificate validation during an attempt to pair a new key fob with the body control module (BCM). This allows an attacker (who is inside a vehicle, or is otherwise able to send data over the CAN bus) to start and drive the vehicle with a spoofed key fob."},{"lang":"es","value":"Los vehículos Tesla Model X anterior al 23-11-2020 no realizan la comprobación del certificado durante un intento de emparejar un nuevo llavero con el módulo de control de carrocería (BCM). Esto permite a un atacante (que se encuentra dentro de un vehículo, o que puede enviar datos por medio del bus CAN) arrancar y conducir el vehículo con un llavero falso"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":0.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tesla:model_x_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2020-11-23","matchCriteriaId":"9F6172D4-78B1-451A-A1CD-D83E8514C3F6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tesla:model_x:-:*:*:*:*:*:*:*","matchCriteriaId":"C550FF8A-58ED-4265-B33F-10AFDEA95519"}]}]}],"references":[{"url":"https://www.wired.com/story/tesla-model-x-hack-bluetooth/","source":"cve@mitre.org","tags":["Exploit","Press/Media Coverage","Third Party Advisory"]},{"url":"https://www.wired.com/story/tesla-model-x-hack-bluetooth/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Press/Media Coverage","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2020-9306","sourceIdentifier":"cve@mitre.org","published":"2021-02-18T00:15:17.327","lastModified":"2026-06-17T03:27:43.887","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Tesla SolarCity Solar Monitoring Gateway through 5.46.43 has a \"Use of Hard-coded Credentials\" issue because Digi ConnectPort X2e uses a .pyc file to store the cleartext password for the python user account."},{"lang":"es","value":"Tesla SolarCity Solar Monitoring Gateway versiones hasta 5.46.43, presenta un problema de \"Use of Hard-coded Credentials\" porque Digi ConnectPort X2e usa un archivo .pyc para almacenar la contraseña en texto sin cifrar para la cuenta de usuario de python"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@mitre.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:P/I:P/A:P","baseScore":5.8,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-522"},{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tesla:solarcity_solar_monitoring_gateway:*:*:*:*:*:*:*:*","versionEndIncluding":"5.46.43","matchCriteriaId":"1158737A-09CB-4F21-8DF1-848D848A00AB"}]}]}],"references":[{"url":"https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2020-0019/FEYE-2020-0019.md","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.fireeye.com/blog/threat-research.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.fireeye.com/blog/threat-research/2021/02/solarcity-exploitation-of-x2e-iot-device-part-one.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.fireeye.com/blog/threat-research/2021/02/solarcity-exploitation-of-x2e-iot-device-part-two.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2020-0019/FEYE-2020-0019.md","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.fireeye.com/blog/threat-research.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.fireeye.com/blog/threat-research/2021/02/solarcity-exploitation-of-x2e-iot-device-part-one.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.fireeye.com/blog/threat-research/2021/02/solarcity-exploitation-of-x2e-iot-device-part-two.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2022-27948","sourceIdentifier":"cve@mitre.org","published":"2022-03-27T13:15:13.573","lastModified":"2026-06-17T04:37:47.503","vulnStatus":"Modified","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"Certain Tesla vehicles through 2022-03-26 allow attackers to open the charging port via a 315 MHz RF signal containing a fixed sequence of approximately one hundred symbols. NOTE: the vendor's perspective is that the behavior is as intended"},{"lang":"es","value":"Determinados vehículos Tesla versiones hasta 26-03-2022, permiten a atacantes abrir el puerto de carga por medio de una señal de RF de 315 MHz que contiene una secuencia fija de aproximadamente cien símbolos"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"tesla","product":"model_3_firmware","defaultStatus":"unknown","cpes":["cpe:2.3:o:tesla:model_3_firmware:2022-03-26:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"2022-03-26","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@mitre.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:P/A:N","baseScore":3.3,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-04-19T14:04:23.082156Z","id":"CVE-2022-27948","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-862"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tesla:model_3_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2022-03-26","matchCriteriaId":"86619D7A-ACB6-489C-9C29-37C6018E5B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:tesla:model_s_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2022-03-26","matchCriteriaId":"FD68704D-C711-491F-B278-B02C6866738C"},{"vulnerable":true,"criteria":"cpe:2.3:o:tesla:model_x_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2022-03-26","matchCriteriaId":"C3517683-8493-4D0D-9792-5C9034B1F0B3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tesla:model_3:-:*:*:*:*:*:*:*","matchCriteriaId":"825A79FD-C872-4564-9782-83BEEADDF5D9"},{"vulnerable":false,"criteria":"cpe:2.3:h:tesla:model_s:-:*:*:*:*:*:*:*","matchCriteriaId":"8D28E699-B843-4641-9BA6-406D88231E7C"},{"vulnerable":false,"criteria":"cpe:2.3:h:tesla:model_x:-:*:*:*:*:*:*:*","matchCriteriaId":"C550FF8A-58ED-4265-B33F-10AFDEA95519"}]}]}],"references":[{"url":"https://github.com/pompel123/Tesla-Charging-Port-Opener","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://twitter.com/IfNotPike/status/1507818836568858631","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://twitter.com/IfNotPike/status/1507852693699661827","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://github.com/pompel123/Tesla-Charging-Port-Opener","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://twitter.com/IfNotPike/status/1507818836568858631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://twitter.com/IfNotPike/status/1507852693699661827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2022-37709","sourceIdentifier":"cve@mitre.org","published":"2022-09-16T22:15:12.137","lastModified":"2026-06-17T04:55:11.453","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Tesla Model 3 V11.0(2022.4.5.1 6b701552d7a6) Tesla mobile app v4.23 is vulnerable to Authentication Bypass by spoofing. Tesla Model 3's Phone Key authentication is vulnerable to Man-in-the-middle attacks in the BLE channel. It allows attackers to open a door and drive the car away by leveraging access to a legitimate Phone Key."},{"lang":"es","value":"Tesla Model 3 versión V11.0(2022.4.5.1 6b701552d7a6) Tesla mobile app versión v4.23 es vulnerable a una Omisión de Autenticación por suplantación. La autenticación de la clave telefónica del Tesla Model 3 es vulnerable a ataques de tipo Man-in-the-middle en el canal BLE. Permite a atacantes abrir una puerta y conducir el coche aprovechando el acceso a una Phone Key legítima"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-290"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tesla:model_3_firmware:11.0:*:*:*:*:*:*:*","matchCriteriaId":"AD1F543F-0BB8-44BF-8BA3-A1579391DCE5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tesla:model_3:-:*:*:*:*:*:*:*","matchCriteriaId":"825A79FD-C872-4564-9782-83BEEADDF5D9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tesla:tesla:4.23:*:*:*:*:android:*:*","matchCriteriaId":"7E527C53-0160-462A-84F2-F237C85EDBC6"}]}]}],"references":[{"url":"https://fmsh-seclab.github.io/","source":"cve@mitre.org","tags":["Exploit","Technical Description","Third Party Advisory"]},{"url":"https://github.com/fmsh-seclab/TesMla","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://youtu.be/cPhYW5FzA9A","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://fmsh-seclab.github.io/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Technical Description","Third Party Advisory"]},{"url":"https://github.com/fmsh-seclab/TesMla","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://youtu.be/cPhYW5FzA9A","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2022-3093","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2023-03-29T19:15:17.013","lastModified":"2026-06-17T04:58:50.553","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"This vulnerability allows physical attackers to execute arbitrary code on affected Tesla vehicles. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ice_updater update mechanism. The issue results from the lack of proper validation of user-supplied firmware. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-17463."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"Tesla","product":"Model 3","versions":[{"version":"Model 3","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.5,"impactScore":5.9}],"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":7.6,"baseSeverity":"HIGH","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-14T16:35:00.590308Z","id":"CVE-2022-3093","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-367"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tesla:model_3_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2022.16.0.3","matchCriteriaId":"E571E233-D3B9-40B7-AFBC-C69682C3BFF9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tesla:model_3:-:*:*:*:*:*:*:*","matchCriteriaId":"825A79FD-C872-4564-9782-83BEEADDF5D9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tesla:model_s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2022.16.0.3","matchCriteriaId":"842FFD5D-5997-4AC9-8B97-CA9B5CEB5A25"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tesla:model_s:-:*:*:*:*:*:*:*","matchCriteriaId":"8D28E699-B843-4641-9BA6-406D88231E7C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tesla:model_x_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2022.16.0.3","matchCriteriaId":"253FD2FF-5849-4AD5-922E-157F4D75C527"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tesla:model_x:-:*:*:*:*:*:*:*","matchCriteriaId":"C550FF8A-58ED-4265-B33F-10AFDEA95519"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tesla:model_y_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2022.16.0.3","matchCriteriaId":"D55D2752-744A-4B14-B7FB-E2BC958CE30E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tesla:model_y:-:*:*:*:*:*:*:*","matchCriteriaId":"43824EBF-924C-4A75-A7F9-F19B4304CF66"}]}]}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-22-1188/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-22-1188/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2022-42430","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2023-03-29T19:15:17.747","lastModified":"2026-06-17T05:04:54.820","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles. An attacker must first obtain the ability to execute privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the wowlan_config data structure. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. Was ZDI-CAN-17543."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"Tesla","product":"Model 3","versions":[{"version":"Model 3 Infotainment 2021.44.30, 2022.12.22","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.0,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-14T16:33:59.220370Z","id":"CVE-2022-42430","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tesla:model_3_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2022.28","matchCriteriaId":"AAFE7ACF-28B8-4D6C-89E8-DB876E4B52ED"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tesla:model_3:-:*:*:*:*:*:*:*","matchCriteriaId":"825A79FD-C872-4564-9782-83BEEADDF5D9"}]}]}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-22-1406/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-22-1406/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2022-42431","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2023-03-29T19:15:17.830","lastModified":"2026-06-17T05:04:54.937","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles. An attacker must first obtain the ability to execute privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the bcmdhd driver. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. Was ZDI-CAN-17544."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"Tesla","product":"Model 3","versions":[{"version":"Model 3 Infotainment 2022.12.22","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.0,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-14T20:25:19.471389Z","id":"CVE-2022-42431","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tesla:model_3_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2022.28","matchCriteriaId":"AAFE7ACF-28B8-4D6C-89E8-DB876E4B52ED"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tesla:model_3:-:*:*:*:*:*:*:*","matchCriteriaId":"825A79FD-C872-4564-9782-83BEEADDF5D9"}]}]}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-22-1407/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-22-1407/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2023-32155","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2024-05-03T02:15:20.187","lastModified":"2026-06-17T05:58:12.307","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Tesla Model 3 bcmdhd Out-Of-Bounds Write Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to execute code on the wifi subsystem in order to exploit this vulnerability.\n\nThe specific flaw exists within the bcmdhd driver. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel.\n. Was ZDI-CAN-20733."},{"lang":"es","value":"Vulnerabilidad de escalada de privilegios locales de escritura fuera de los límites del Tesla Model 3 bcmdhd. Esta vulnerabilidad permite a los atacantes locales escalar privilegios en los vehículos Tesla Model 3 afectados. Un atacante primero debe obtener la capacidad de ejecutar código en el subsistema wifi para poder explotar esta vulnerabilidad. La falla específica existe en el controlador bcmdhd. El problema se debe a la falta de una validación adecuada de los datos proporcionados por el usuario, lo que puede provocar una escritura más allá del final de un búfer asignado. Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios y ejecutar código arbitrario en el contexto del kernel. Era ZDI-CAN-20733."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"Tesla","product":"Model 3","defaultStatus":"unknown","versions":[{"version":"Model 3 - 2023.6","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"tesla","product":"model_3_firmware","defaultStatus":"unknown","cpes":["cpe:2.3:o:tesla:model_3_firmware:-:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"2023.12","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.0,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":5.9}],"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.1,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-05-03T17:20:49.001737Z","id":"CVE-2023-32155","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tesla:model_3_firmware:2023.6:*:*:*:*:*:*:*","matchCriteriaId":"3D214E54-F9A5-4E96-BC85-C86DD869D122"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tesla:model_3:-:*:*:*:*:*:*:*","matchCriteriaId":"825A79FD-C872-4564-9782-83BEEADDF5D9"}]}]}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-23-971/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-23-971/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2023-32156","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2024-05-03T02:15:20.353","lastModified":"2026-06-17T05:58:12.443","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to execute privileged code on the Tesla infotainment system in order to exploit this vulnerability.\n\nThe specific flaw exists within the handling of firmware updates. The issue results from improper error-handling during the update process. An attacker can leverage this vulnerability to execute code in the context of Tesla's Gateway ECU.\n. Was ZDI-CAN-20734."},{"lang":"es","value":"Vulnerabilidad de omisión de validación de firma de firmware de puerta de enlace Tesla Model 3. Esta vulnerabilidad permite a atacantes adyacentes a la red ejecutar código arbitrario en los vehículos Tesla Model 3 afectados. Un atacante primero debe obtener la capacidad de ejecutar código privilegiado en el sistema de información y entretenimiento de Tesla para poder explotar esta vulnerabilidad. La falla específica existe en el manejo de actualizaciones de firmware. El problema se debe a un manejo inadecuado de errores durante el proceso de actualización. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de la ECU Gateway de Tesla. Era ZDI-CAN-20734."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"Tesla","product":"Model 3","defaultStatus":"unknown","versions":[{"version":"Model 3 - 2023.6","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"tesla","product":"model_3","defaultStatus":"unknown","cpes":["cpe:2.3:h:tesla:model_3:-:*:*:*:*:*:*:*"],"versions":[{"version":"-","lessThan":"2023.12","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":9.0,"baseSeverity":"CRITICAL","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.3,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-05-16T18:28:16.771162Z","id":"CVE-2023-32156","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-367"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tesla:model_3_firmware:2023.6:*:*:*:*:*:*:*","matchCriteriaId":"3D214E54-F9A5-4E96-BC85-C86DD869D122"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tesla:model_3:-:*:*:*:*:*:*:*","matchCriteriaId":"825A79FD-C872-4564-9782-83BEEADDF5D9"}]}]}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-23-972/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-23-972/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2023-32157","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2024-05-03T02:15:20.517","lastModified":"2026-06-17T05:58:12.570","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Tesla Model 3 bsa_server BIP Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the bsa_server process. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of an unprivileged user in a sandboxed process.\n. Was ZDI-CAN-20737."},{"lang":"es","value":"Vulnerabilidad de ejecución de código arbitrario de desbordamiento de búfer de almacenamiento dinámico BIP del Tesla Model 3 bsa_server. Esta vulnerabilidad permite a atacantes adyacentes a la red ejecutar código arbitrario en los vehículos Tesla Model 3 afectados. Un atacante primero debe obtener la capacidad de emparejar un dispositivo Bluetooth malicioso con el sistema de destino para poder aprovechar esta vulnerabilidad. La falla específica existe dentro del proceso bsa_server. El problema se debe a la falta de una validación adecuada de la longitud de los datos proporcionados por el usuario antes de copiarlos en un búfer basado en montón de longitud fija. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de un usuario sin privilegios en un proceso de espacio aislado. Era ZDI-CAN-20737."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"Tesla","product":"Model 3","defaultStatus":"unknown","versions":[{"version":"Model 3 - 2023.6","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9}],"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.2,"impactScore":3.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-05-09T17:53:55.416927Z","id":"CVE-2023-32157","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tesla:model_3_firmware:2023.6:*:*:*:*:*:*:*","matchCriteriaId":"3D214E54-F9A5-4E96-BC85-C86DD869D122"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tesla:model_3:-:*:*:*:*:*:*:*","matchCriteriaId":"825A79FD-C872-4564-9782-83BEEADDF5D9"}]}]}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-23-973/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-23-973/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2024-13943","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2025-04-30T20:15:20.520","lastModified":"2026-06-17T07:03:01.743","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Tesla Model S Iris Modem QCMAP_ConnectionManager Improper Input Validation Sandbox Escape Vulnerability. This vulnerability allows local attackers to escape the sandbox on affected affected Tesla Model S vehicles. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the QCMAP_ConnectionManager component. An attacker can abuse the service to assign LAN addresses to the WWAN. An attacker can leverage this vulnerability to access network services that were only intended to be exposed to the internal LAN. Was ZDI-CAN-23199."},{"lang":"es","value":"Vulnerabilidad de escape de la zona protegida con validación de entrada incorrecta del módem Iris QCMAP_ConnectionManager de Tesla Model S. Esta vulnerabilidad permite a atacantes locales escapar de la zona de pruebas en los vehículos Tesla Model S afectados. Para explotar esta vulnerabilidad, un atacante debe primero ejecutar código con privilegios bajos en el sistema objetivo. La falla específica se encuentra en el componente QCMAP_ConnectionManager. Un atacante puede abusar del servicio para asignar direcciones LAN a la WWAN. Un atacante puede aprovechar esta vulnerabilidad para acceder a servicios de red que solo estaban destinados a estar expuestos a la LAN interna. Era ZDI-CAN-23199."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"Tesla","product":"Model S","defaultStatus":"unknown","versions":[{"version":"2023.44.29 with the AG525RGLAAR01A16M4G_OCPU_02.003.10.003 connectivity card","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-30T20:14:56.383912Z","id":"CVE-2024-13943","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tesla:model_s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2024.8","matchCriteriaId":"D1F9CBB6-013F-43C4-B01D-D8CBE1623F4E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tesla:model_s:-:*:*:*:*:*:*:*","matchCriteriaId":"8D28E699-B843-4641-9BA6-406D88231E7C"}]}]}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-262/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2024-6029","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2025-04-30T20:15:20.900","lastModified":"2026-06-17T08:17:08.673","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Tesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass the firewall on the Iris modem in affected Tesla Model S vehicles. Authentication is not required to exploit this vulnerability.\n \nThe specific flaw exists within the firewall service. The issue results from a failure to obtain the xtables lock. An attacker can leverage this vulnerability to bypass firewall rules. Was ZDI-CAN-23197."},{"lang":"es","value":"Vulnerabilidad de elusión del firewall en condiciones de ejecución del módem Iris del Tesla Model S. Esta vulnerabilidad permite a atacantes adyacentes a la red eludir el firewall del módem Iris en los vehículos Tesla Model S afectados. No se requiere autenticación para explotar esta vulnerabilidad. La falla específica existe en el servicio de firewall. El problema se debe a un fallo al obtener el bloqueo de xtables. Un atacante puede aprovechar esta vulnerabilidad para eludir las reglas del firewall. Anteriormente, se denominaba ZDI-CAN-23197."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"Tesla","product":"Model S","defaultStatus":"unknown","versions":[{"version":"2023.44.29 with the AG525RGLAAR01A16M4G_OCPU_02.003.10.003 connectivity card","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.6,"impactScore":3.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-30T20:12:45.289795Z","id":"CVE-2024-6029","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-367"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tesla:model_s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2024.2.3","matchCriteriaId":"AD4B13B4-922C-4570-9686-173D0965630A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tesla:model_s:-:*:*:*:*:*:*:*","matchCriteriaId":"8D28E699-B843-4641-9BA6-406D88231E7C"}]}]}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-260/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2024-6030","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2025-04-30T20:15:21.030","lastModified":"2026-06-17T08:17:08.770","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Tesla Model S oFono Unnecessary Privileges Sandbox Escape Vulnerability. This vulnerability allows local attackers to escape the sandbox on affected Tesla Model S vehicles. An attacker must first obtain the ability to execute code within the sandbox on the target system in order to exploit this vulnerability.\n \nThe specific flaw exists within the oFono process. The process allows an attacker to modify interfaces. An attacker can leverage this vulnerability to bypass the iptables network sandbox. Was ZDI-CAN-23200."},{"lang":"es","value":"Vulnerabilidad de escape del entorno de pruebas de oFono con privilegios innecesarios en el Tesla Model S. Esta vulnerabilidad permite a atacantes locales escapar del entorno de pruebas en los vehículos Tesla Model S afectados. Para explotar esta vulnerabilidad, un atacante debe primero ejecutar código dentro del entorno de pruebas en el sistema objetivo. La falla específica se encuentra en el proceso oFono, que permite a un atacante modificar interfaces. Un atacante puede aprovechar esta vulnerabilidad para eludir el entorno de pruebas de red de iptables. Anteriormente, se denominaba ZDI-CAN-23200."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"Tesla","product":"Model S","defaultStatus":"unknown","versions":[{"version":"2023.44.29","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.0,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-30T20:16:00.543848Z","id":"CVE-2024-6030","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-250"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tesla:model_s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2024.8","matchCriteriaId":"D1F9CBB6-013F-43C4-B01D-D8CBE1623F4E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tesla:model_s:-:*:*:*:*:*:*:*","matchCriteriaId":"8D28E699-B843-4641-9BA6-406D88231E7C"}]}]}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-263/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2024-6031","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2025-04-30T20:15:21.153","lastModified":"2026-06-17T08:17:08.863","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Tesla Model S oFono AT Command Heap-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected Tesla Model S vehicles. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability.\n \nThe specific flaw exists within the parsing of responses from AT commands. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-23198."},{"lang":"es","value":"Vulnerabilidad de ejecución de código por desbordamiento de búfer basado en el montón del comando AT oFono del Tesla Model S. Esta vulnerabilidad permite a atacantes locales ejecutar código arbitrario en los vehículos Tesla Model S afectados. Para explotar esta vulnerabilidad, un atacante debe primero obtener la capacidad de ejecutar código en el módem objetivo. La falla específica se encuentra en el análisis de las respuestas de los comandos AT. El problema se debe a la falta de una validación adecuada de la longitud de los datos proporcionados por el usuario antes de copiarlos a un búfer basado en el montón. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del dispositivo. Anteriormente, se denominaba ZDI-CAN-23198."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"Tesla","product":"Model S","defaultStatus":"unknown","versions":[{"version":"2023.44.29","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-30T20:12:19.564646Z","id":"CVE-2024-6031","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tesla:model_s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2024.2","matchCriteriaId":"A7A192E4-03E9-42F6-BC81-57DC202EC94D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tesla:model_s:-:*:*:*:*:*:*:*","matchCriteriaId":"8D28E699-B843-4641-9BA6-406D88231E7C"}]}]}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-261/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2024-6032","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2025-04-30T20:15:21.283","lastModified":"2026-06-17T08:17:08.953","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Tesla Model S Iris Modem ql_atfwd Command Injection Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected Tesla Model S vehicles. An attacker must first obtain the ability to execute code on the target system in order to exploit this vulnerability.\n \nThe specific flaw exists within the ql_atfwd process. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code on the target modem in the context of root. Was ZDI-CAN-23201."},{"lang":"es","value":"Vulnerabilidad de ejecución de código por inyección de comandos ql_atfwd en el módem Iris del Tesla Model S. Esta vulnerabilidad permite a atacantes locales ejecutar código arbitrario en los vehículos Tesla Model S afectados. Para explotar esta vulnerabilidad, un atacante debe obtener primero la capacidad de ejecutar código en el sistema objetivo. La falla específica se encuentra en el proceso ql_atfwd. El problema se debe a la falta de validación adecuada de una cadena proporcionada por el usuario antes de usarla para ejecutar una llamada al sistema. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el módem objetivo con acceso root. Era ZDI-CAN-23201."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"Tesla","product":"Model S","defaultStatus":"unknown","versions":[{"version":"2023.44.29 with the AG525RGLAAR01A16M4G_OCPU_02.003.10.003 connectivity card","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-30T20:16:50.582107Z","id":"CVE-2024-6032","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tesla:model_s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2024.8","matchCriteriaId":"D1F9CBB6-013F-43C4-B01D-D8CBE1623F4E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tesla:model_s:-:*:*:*:*:*:*:*","matchCriteriaId":"8D28E699-B843-4641-9BA6-406D88231E7C"}]}]}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-264/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2025-2082","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2025-04-30T20:15:21.563","lastModified":"2026-06-17T09:06:16.230","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Tesla Model 3 VCSEC Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 vehicles. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the VCSEC module. By manipulating the certificate response sent from the Tire Pressure Monitoring System (TPMS), an attacker can trigger an integer overflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the VCSEC module and send arbitrary messages to the vehicle CAN bus. Was ZDI-CAN-23800."},{"lang":"es","value":"Vulnerabilidad de ejecución remota de código por desbordamiento de enteros en el VCSEC del Tesla Model 3. Esta vulnerabilidad permite a atacantes adyacentes a la red ejecutar código arbitrario en los vehículos Tesla Model 3 afectados. No se requiere autenticación para explotar esta vulnerabilidad. La falla específica se encuentra en el módulo VCSEC. Al manipular la respuesta del certificado enviada desde el Tire Pressure Monitoring System (TPMS), un atacante puede provocar un desbordamiento de enteros antes de escribir en memoria. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del módulo VCSEC y enviar mensajes arbitrarios al bus CAN del vehículo. Anteriormente, se denominaba ZDI-CAN-23800."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"Tesla","product":"Model 3","defaultStatus":"unknown","versions":[{"version":"2024.8","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-30T20:17:38.000526Z","id":"CVE-2025-2082","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tesla:model_3_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2024.14","matchCriteriaId":"712974EE-FC04-4835-9622-7E3A518431D1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tesla:model_3:-:*:*:*:*:*:*:*","matchCriteriaId":"825A79FD-C872-4564-9782-83BEEADDF5D9"}]}]}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-265/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2025-8320","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2025-07-30T01:15:26.077","lastModified":"2026-06-17T10:06:44.490","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Tesla Wall Connector Content-Length Header Improper Input Validation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Tesla Wall Connector devices. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the parsing of the HTTP Content-Length header. The issue results from the lack of proper validation of user-supplied data, which can result in memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-26300."},{"lang":"es","value":"Vulnerabilidad de ejecución remota de código por validación incorrecta de entrada en el encabezado Content-Length de Tesla Wall Connector. Esta vulnerabilidad permite a atacantes adyacentes a la red ejecutar código arbitrario en las instalaciones afectadas de dispositivos Tesla Wall Connector. No se requiere autenticación para explotar esta vulnerabilidad. La falla específica se encuentra en el análisis del encabezado HTTP Content-Length. El problema se debe a la falta de una validación adecuada de los datos proporcionados por el usuario, lo que puede provocar el acceso a memoria más allá del límite del búfer asignado. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del dispositivo. Anteriormente, se denominaba ZDI-CAN-26300."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"Tesla","product":"Wall Connector","defaultStatus":"unknown","versions":[{"version":"24.44.1","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-07-30T13:45:29.396761Z","id":"CVE-2025-8320","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-1284"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tesla:wall_connector_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"24.44.3","matchCriteriaId":"6EA3C822-7AC3-4E30-A843-9B8013295BBE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tesla:wall_connector:-:*:*:*:*:*:*:*","matchCriteriaId":"583D4B2D-6F23-440F-A8AF-224AC9AEED54"}]}]}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-711/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2025-8321","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2025-07-30T01:15:26.233","lastModified":"2026-06-17T10:06:44.597","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Tesla Wall Connector Firmware Downgrade Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Tesla Wall Connector devices. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the firmware upgrade feature. The issue results from the lack of an anti-downgrade mechanism. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the device. Was ZDI-CAN-26299."},{"lang":"es","value":"Vulnerabilidad de degradación de Tesla Wall Connector Firmware. Esta vulnerabilidad permite a atacantes con presencia física ejecutar código arbitrario en las instalaciones afectadas de los dispositivos Tesla Wall Connector. No se requiere autenticación para explotar esta vulnerabilidad. La falla específica se encuentra en la función de actualización de firmware. El problema se debe a la falta de un mecanismo anti-degradación. Un atacante puede aprovechar esto, junto con otras vulnerabilidades, para ejecutar código en el contexto del dispositivo. Era ZDI-CAN-26299."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"Tesla","product":"Wall Connector","defaultStatus":"unknown","versions":[{"version":"24.44.1","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-07-30T13:47:20.207388Z","id":"CVE-2025-8321","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-1328"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tesla:wall_connector_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"24.44.3","matchCriteriaId":"6EA3C822-7AC3-4E30-A843-9B8013295BBE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tesla:wall_connector:-:*:*:*:*:*:*:*","matchCriteriaId":"583D4B2D-6F23-440F-A8AF-224AC9AEED54"}]}]}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-712/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory"]}]}}]}