tesla-security-research

特斯拉安全研究 对特斯拉 Model 3/Y 信息娱乐系统（Intel Atom MCU，Linux 4.14.235）的漏洞研究，已通过 Bugcrowd 向特斯拉负责任的披露。 通过特斯拉 ODIN 诊断接口的命令注入漏洞 CVE-2022-42008，在一台量产特斯拉 Model 3 上获得了持久的 root 访问权限。由此，又发现了五个额外漏洞——包括一种能够抵御固件更新的持久化方法（CVE-2022-42005，CVE-2022-42006）以及一种伪造 Safety Score 保险遥测数据的方法，该方法直接将月保费从 130 美元降至 83 美元。 ODIN、hermes ...

CVE-2026-7413 Persistent undocumented backdoor access in Yarbo robot

A hidden, persistent backdoor was found in Yarbo firmware v2.3.9 that provides remote, unauthenticated or weakly authenticated access to privileged functionality. The backdoor is undocumented, cannot be disabled via user-facing settings, and survives factory reset and ordinary firmware updates...

CVE-2025-34503 Shuffle Master Deck Mate 1 Unauthenticated EEPROM Firmware Execution

Deck Mate 1 executes firmware directly from an external EEPROM without verifying authenticity or integrity. An attacker with physical access can replace or reflash the EEPROM to run arbitrary code that persists across reboots. Because this design predates modern secure-boot or signed-update...

China-linked Hackers Targeting Unpatched SonicWall SMA Devices with Malware

A suspecting China-linked hacking campaign has been observed targeting unpatched SonicWall Secure Mobile Access SMA 100 appliances to drop malware and establish long-term persistence. "The malware has functionality to steal user credentials, provide shell access, and persist through firmware...

PT-2022-25306 · Unknown · Overclocksmihandler

Name of the Vulnerable Software and Affected Versions: OverClockSmiHandler affected versions not specified Description: An attacker can exploit this issue to elevate privileges from ring 0 to ring -2, execute arbitrary code in System Management Mode - an environment more privileged than the...