EUVD-2020-21812

Malware in sbrugna...

CVE-2020-29439

Tesla Model X vehicles before 2020-11-23 have key fobs that rely on five VIN digits for the authentication needed for a body control module BCM to initiate a Bluetooth wake-up action. The full VIN is visible from outside the vehicle...

Code injection

Tesla Model X vehicles before 2020-11-23 do not perform certificate validation during an attempt to pair a new key fob with the body control module BCM. This allows an attacker who is inside a vehicle, or is otherwise able to send data over the CAN bus to start and drive the vehicle with a spoofe...

CVE-2020-29440

Tesla Model X vehicles before 2020-11-23 are affected by CVE-2020-29440, where the system does not perform certificate validation when pairing a new key fob with the Body Control Module (BCM). This allows an attacker who is inside the vehicle or can send data over the CAN bus to start and drive t...

CVE-2020-29440: Improper Certificate Validation

Tesla Model X vehicles before 2020-11-23 do not perform certificate validation during an attempt to pair a new key fob with the body control module BCM. This allows an attacker who is inside a vehicle, or is otherwise able to send data over the CAN bus to start and drive the vehicle with a spoofe...

Tesla Model X Trust Management Issues Vulnerabilities

Tesla Tesla Model X is a new energy vehicle from Tesla Inc. in the United States. A security vulnerability exists in versions of Tesla Model X vehicles prior to 2020-11-23, which stems from a certificate validation not being performed when attempting to pair a new keycard with the Body Control...

Tesla Model X Security Breach

Tesla The Tesla Model X is a new energy vehicle from the American company Tesla. A security vulnerability exists in versions of Tesla Model X vehicles prior to 2020-11-23, which stems from the fact that its key fobs rely on 5 VIN digits for authentication, and the Body Control Module BCM is...

PT-2020-17163

Name of the Vulnerable Software and Affected Versions Tesla Model X vehicles before 2020-11-23 Description The issue allows an attacker, who is inside a vehicle or able to send data over the CAN bus, to start and drive the vehicle with a spoofed key fob. This is possible because the vehicles do n...