Lucene search
+L

804 matches found

OSV
OSV
•added 2025/04/30 8:15 p.m.•14 views

CVE-2024-6029

Tesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass the firewall on the Iris modem in affected Tesla Model S vehicles. Authentication is not required to exploit this vulnerability. The specific flaw exists within th...

5CVSS5.8AI score0.00222EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/30 8:15 p.m.•36 views

CVE-2024-6029

Tesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass the firewall on the Iris modem in affected Tesla Model S vehicles. Authentication is not required to exploit this vulnerability. The specific flaw exists within th...

5CVSS0.00222EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/30 8:00 p.m.•52 views

CVE-2024-6032 Tesla Model S Iris Modem ql_atfwd Command Injection Code Execution Vulnerability

Tesla Model S Iris Modem qlatfwd Command Injection Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected Tesla Model S vehicles. An attacker must first obtain the ability to execute code on the target system in order to exploit this...

7.8CVSS0.00534EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/30 8:00 p.m.•14 views

CVE-2024-6032 Tesla Model S Iris Modem ql_atfwd Command Injection Code Execution Vulnerability

Tesla Model S Iris Modem qlatfwd Command Injection Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected Tesla Model S vehicles. An attacker must first obtain the ability to execute code on the target system in order to exploit this...

7.8CVSS8AI score0.00534EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/30 8:00 p.m.•102 views

CVE-2024-6032

CVE-2024-6032. Concrete details across connected sources show a local command-injection in Tesla Model S Iris Modem via the ql_atfwd process. The flaw stems from inadequate validation of a user-supplied string used to form a system call, allowing an attacker with code execution on the target to r...

7.8CVSS8AI score0.00534EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2025/04/30 8:00 p.m.•76 views

CVE-2024-13943

CVE-2024-13943 describes a local sandbox-escape vulnerability in the Tesla Model S Iris Modem, specifically within the QCMAP_ConnectionManager. The flaw allows a low-privilege local attacker to exploit improper input validation to assign LAN addresses to the WWAN, enabling access to network servi...

7.8CVSS7.1AI score0.00181EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/04/30 8:00 p.m.•80 views

CVE-2024-13943 Tesla Model S Iris Modem QCMAP_ConnectionManager Improper Input Validation Sandbox Escape Vulnerability

Tesla Model S Iris Modem QCMAPConnectionManager Improper Input Validation Sandbox Escape Vulnerability. This vulnerability allows local attackers to escape the sandbox on affected affected Tesla Model S vehicles. An attacker must first obtain the ability to execute low-privileged code on the targ...

7.8CVSS0.00181EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/30 8:00 p.m.•31 views

CVE-2024-13943 Tesla Model S Iris Modem QCMAP_ConnectionManager Improper Input Validation Sandbox Escape Vulnerability

Tesla Model S Iris Modem QCMAPConnectionManager Improper Input Validation Sandbox Escape Vulnerability. This vulnerability allows local attackers to escape the sandbox on affected affected Tesla Model S vehicles. An attacker must first obtain the ability to execute low-privileged code on the targ...

7.8CVSS7.1AI score0.00181EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/30 8:00 p.m.•96 views

CVE-2024-6029

CVE-2024-6029 concerns the Tesla Model S Iris Modem firewall, where a race-condition flaw in the firewall service arises from a failure to obtain the xtables lock. This vulnerability allows network-adjacent attackers to bypass firewall rules without authentication. The issue is documented across ...

5CVSS5AI score0.00222EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/04/30 8:00 p.m.•51 views

CVE-2024-6029 Tesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability

Tesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass the firewall on the Iris modem in affected Tesla Model S vehicles. Authentication is not required to exploit this vulnerability. The specific flaw exists within th...

5CVSS0.00222EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/30 8:00 p.m.•11 views

CVE-2024-6029 Tesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability

Tesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass the firewall on the Iris modem in affected Tesla Model S vehicles. Authentication is not required to exploit this vulnerability. The specific flaw exists within th...

5CVSS6.7AI score0.00222EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/30 12:00 a.m.•15 views

PT-2025-18323 · Tesla · Tesla Model S

Name of the Vulnerable Software and Affected Versions: Tesla Model S affected versions not specified Description: This issue allows network-adjacent attackers to bypass the firewall on the Iris modem in affected Tesla Model S vehicles. The flaw exists within the firewall service due to a failure ...

5CVSS4.8AI score0.00222EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/30 12:00 a.m.•5 views

CVE-2024-6029: Time-of-check Time-of-use (TOCTOU) Race Condition

Tesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass the firewall on the Iris modem in affected Tesla Model S vehicles. Authentication is not required to exploit this vulnerability. The specific flaw exists within th...

5CVSS5.8AI score0.00222EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/30 12:00 a.m.•7 views

CVE-2024-6032: Improper Neutralization of Special Elements used in an OS Command

Tesla Model S Iris Modem qlatfwd Command Injection Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected Tesla Model S vehicles. An attacker must first obtain the ability to execute code on the target system in order to exploit this...

7.8CVSS7.8AI score0.00534EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/04/30 12:00 a.m.•39 views

(Pwn2Own) Tesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass the firewall on the Iris modem in affected Tesla Model S vehicles. Authentication is not required to exploit this vulnerability. The specific flaw exists within the firewall service. The issue results from a failure to obtain the...

5CVSS6.5AI score0.00222EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/04/30 12:00 a.m.•21 views

PT-2025-18326 · Tesla · Tesla Model S Iris Modem

Name of the Vulnerable Software and Affected Versions: Tesla Model S Iris Modem affected versions not specified Description: This issue allows local attackers to execute arbitrary code on affected Tesla Model S vehicles. The flaw exists within the ql atfwd process due to the lack of proper...

7.8CVSS7.7AI score0.00534EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/30 12:00 a.m.•6 views

CVE-2024-13943: Improper Input Validation

Tesla Model S Iris Modem QCMAPConnectionManager Improper Input Validation Sandbox Escape Vulnerability. This vulnerability allows local attackers to escape the sandbox on affected affected Tesla Model S vehicles. An attacker must first obtain the ability to execute low-privileged code on the targ...

7.8CVSS7.5AI score0.00181EPSS
SaveExploits0References1
OSV
OSV
•added 2024/08/14 2:15 p.m.•15 views

CVE-2024-28050

Improper access control in some IntelR ArcTM & IrisR Xe Graphics software before version 31.0.101.4824 may allow an authenticated user to potentially enable denial of service via local access...

5.5CVSS5.8AI score0.00129EPSS
SaveExploits0References1
NVD
NVD
•added 2024/08/14 2:15 p.m.•35 views

CVE-2024-28050

Improper access control in some IntelR ArcTM & IrisR Xe Graphics software before version 31.0.101.4824 may allow an authenticated user to potentially enable denial of service via local access...

5.5CVSS0.00129EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/08/14 1:45 p.m.•40 views

CVE-2024-28050

Improper access control in some IntelR ArcTM & IrisR Xe Graphics software before version 31.0.101.4824 may allow an authenticated user to potentially enable denial of service via local access...

5.1CVSS0.00129EPSS
SaveExploits0References1
Rows per page
Query Builder