Skip to main content

Model S Firmware

6 CVEs product

Monthly

CVE-2024-6032 Apr 30, 20:15 HIGH This Week

Tesla Model S Iris Modem ql_atfwd Command Injection Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

RCE Command Injection Model S Firmware Tesla
NVD
CVSS 3.0
7.8
EPSS
0.1%
CVE-2024-6031 Apr 30, 20:15 HIGH This Week

Tesla Model S oFono AT Command Heap-based Buffer Overflow Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Model S Firmware Tesla
NVD
CVSS 3.0
7.8
EPSS
0.1%
CVE-2024-6030 Apr 30, 20:15 HIGH This Week

Tesla Model S oFono Unnecessary Privileges Sandbox Escape Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Privilege Escalation Model S Firmware Tesla
NVD
CVSS 3.0
7.0
EPSS
0.1%
CVE-2024-6029 Apr 30, 20:15 MEDIUM This Month

Tesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability. Rated medium severity (CVSS 5.0), this vulnerability is no authentication required. No vendor patch available.

Authentication Bypass Model S Firmware Tesla
NVD
CVSS 3.0
5.0
EPSS
0.1%
CVE-2024-13943 Apr 30, 20:15 HIGH This Week

Tesla Model S Iris Modem QCMAP_ConnectionManager Improper Input Validation Sandbox Escape Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Model S Firmware Tesla
NVD
CVSS 3.0
7.8
EPSS
0.1%
CVE-2022-27948 Mar 27, 13:15 MEDIUM POC This Month

Certain Tesla vehicles through 2022-03-26 allow attackers to open the charging port via a 315 MHz RF signal containing a fixed sequence of approximately one hundred symbols. Rated medium severity (CVSS 4.3), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Model S Firmware Model 3 Firmware Tesla Model X Firmware
NVD GitHub
CVSS 3.1
4.3
EPSS
1.4%
EPSS 0% CVSS 7.8
HIGH This Week

Tesla Model S Iris Modem ql_atfwd Command Injection Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

RCE Command Injection Model S Firmware +1
NVD
EPSS 0% CVSS 7.8
HIGH This Week

Tesla Model S oFono AT Command Heap-based Buffer Overflow Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow +2
NVD
EPSS 0% CVSS 7.0
HIGH This Week

Tesla Model S oFono Unnecessary Privileges Sandbox Escape Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Privilege Escalation Model S Firmware Tesla
NVD
EPSS 0% CVSS 5.0
MEDIUM This Month

Tesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability. Rated medium severity (CVSS 5.0), this vulnerability is no authentication required. No vendor patch available.

Authentication Bypass Model S Firmware Tesla
NVD
EPSS 0% CVSS 7.8
HIGH This Week

Tesla Model S Iris Modem QCMAP_ConnectionManager Improper Input Validation Sandbox Escape Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Model S Firmware Tesla
NVD
EPSS 1% CVSS 4.3
MEDIUM POC This Month

Certain Tesla vehicles through 2022-03-26 allow attackers to open the charging port via a 315 MHz RF signal containing a fixed sequence of approximately one hundred symbols. Rated medium severity (CVSS 4.3), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Model S Firmware Model 3 Firmware +2
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy