tesla-security-research

테슬라 보안 연구 Tesla Model 3/Y 인포테인먼트 시스템Intel Atom MCU, Linux 4.14.235에 대한 취약점 연구로, Bugcrowd를 통해 Tesla에 책임감 있게 제보되었습니다. 생산 중인 Tesla Model 3에서 Tesla의 ODIN 진단 인터페이스의 명령어 주입 취약점을 통해 지속적인 루트 액세스를 획득했습니다CVE-2022-42008. 그로부터 펌웨어 업데이트 이후에도 지속되는 지속성 방법CVE-2022-42005, CVE-2022-42006과 월 보험료를 $130에서 $83으로 직접 낮춘...

CVE-2026-7413 Persistent undocumented backdoor access in Yarbo robot

A hidden, persistent backdoor was found in Yarbo firmware v2.3.9 that provides remote, unauthenticated or weakly authenticated access to privileged functionality. The backdoor is undocumented, cannot be disabled via user-facing settings, and survives factory reset and ordinary firmware updates...

CVE-2025-34503 Shuffle Master Deck Mate 1 Unauthenticated EEPROM Firmware Execution

Deck Mate 1 executes firmware directly from an external EEPROM without verifying authenticity or integrity. An attacker with physical access can replace or reflash the EEPROM to run arbitrary code that persists across reboots. Because this design predates modern secure-boot or signed-update...

China-linked Hackers Targeting Unpatched SonicWall SMA Devices with Malware

A suspecting China-linked hacking campaign has been observed targeting unpatched SonicWall Secure Mobile Access SMA 100 appliances to drop malware and establish long-term persistence. "The malware has functionality to steal user credentials, provide shell access, and persist through firmware...

PT-2022-25306 · Unknown · Overclocksmihandler

Name of the Vulnerable Software and Affected Versions: OverClockSmiHandler affected versions not specified Description: An attacker can exploit this issue to elevate privileges from ring 0 to ring -2, execute arbitrary code in System Management Mode - an environment more privileged than the...