Tesla Model S 安全漏洞

Tesla Model S is an automobile from the American company Tesla. A security vulnerability exists in Tesla Model S. The vulnerability stems from the firewall service not properly acquiring the xtables lock, which could lead to a firewall rule bypass...

Tesla Model S 操作系统命令注入漏洞

The Tesla Model S is an automobile from the American company Tesla Tesla. The Tesla Model S suffers from an operating system command injection vulnerability that stems from the qlatfwd process failing to validate user input, which could lead to command injection...

Tesla Model S 输入验证错误漏洞

The Tesla Model S is an automobile from the American company Tesla, Inc. An input validation error vulnerability exists in Tesla Model S. The vulnerability stems from improper input validation and could cause a local user to escape the sandbox...

(Pwn2Own) Tesla Model S oFono Unnecessary Privileges Sandbox Escape Vulnerability

This vulnerability allows local attackers to escape the sandbox on affected Tesla Model S vehicles. An attacker must first obtain the ability to execute code within the sandbox on the target system in order to exploit this vulnerability. The specific flaw exists within the oFono process. The...

Tesla Model S 安全漏洞

The Tesla Model S is an automobile from the American company Tesla. A security vulnerability exists in the Tesla Model S oFono that stems from a failure to validate data length when parsing AT command responses, which could result in a heap buffer overflow...

(Pwn2Own) Tesla Model S Iris Modem ql_atfwd Command Injection Code Execution Vulnerability

This vulnerability allows local attackers to execute arbitrary code on affected Tesla Model S vehicles. An attacker must first obtain the ability to execute code on the target system in order to exploit this vulnerability. The specific flaw exists within the qlatfwd process. The issue results fro...

(Pwn2Own) Tesla Model S Iris Modem QCMAP_ConnectionManager Improper Input Validation Sandbox Escape Vulnerability

This vulnerability allows local attackers to escape the sandbox on affected affected Tesla Model S vehicles. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

PT-2025-18325 · Tesla · Tesla Model S

Name of the Vulnerable Software and Affected Versions: Tesla Model S versions affected versions not specified Description: This issue allows local attackers to execute arbitrary code on affected Tesla Model S vehicles. The flaw exists within the parsing of responses from AT commands, resulting fr...

PT-2025-18326 · Tesla · Tesla Model S Iris Modem

Name of the Vulnerable Software and Affected Versions: Tesla Model S Iris Modem affected versions not specified Description: This issue allows local attackers to execute arbitrary code on affected Tesla Model S vehicles. The flaw exists within the ql atfwd process due to the lack of proper...

Tesla Model S 安全漏洞

Tesla Model S is an automobile from the American company Tesla Tesla. A security vulnerability exists in Tesla Model S. The vulnerability stems from a process allowing modification of the interface, which could lead to a network sandbox bypass...

PT-2025-18322 · Tesla · Tesla Model S

Name of the Vulnerable Software and Affected Versions: Tesla Model S versions affected versions not specified Description: This issue allows local attackers to escape the sandbox on affected Tesla Model S vehicles. To exploit this, an attacker must first obtain the ability to execute low-privileg...

PT-2025-18323 · Tesla · Tesla Model S

Name of the Vulnerable Software and Affected Versions: Tesla Model S affected versions not specified Description: This issue allows network-adjacent attackers to bypass the firewall on the Iris modem in affected Tesla Model S vehicles. The flaw exists within the firewall service due to a failure ...

PT-2025-18324 · Tesla · Tesla Model S

Name of the Vulnerable Software and Affected Versions: Tesla Model S affected versions not specified Description: This issue allows local attackers to escape the sandbox on affected Tesla Model S vehicles. To exploit this, an attacker must first obtain the ability to execute code within the sandb...

(Pwn2Own) Tesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass the firewall on the Iris modem in affected Tesla Model S vehicles. Authentication is not required to exploit this vulnerability. The specific flaw exists within the firewall service. The issue results from a failure to obtain the...

(Pwn2Own) Tesla Model S oFono AT Command Heap-based Buffer Overflow Code Execution Vulnerability

This vulnerability allows local attackers to execute arbitrary code on affected Tesla Model S vehicles. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability. The specific flaw exists within the parsing of responses from AT commands...

CVE-2024-10635

Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthenticated remote attacker to bypass attachment scanning security policy by sending a malicious S/MIME attachment with an opaque signature. When opened by a recipient in a downstrea...

CVE-2024-10635

Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthenticated remote attacker to bypass attachment scanning security policy by sending a malicious S/MIME attachment with an opaque signature. When opened by a recipient in a downstrea...

CVE-2024-10635 Enterprise Protection S/MIME Opaque Signature Attachment Scanning Bypass

Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthenticated remote attacker to bypass attachment scanning security policy by sending a malicious S/MIME attachment with an opaque signature. When opened by a recipient in a downstrea...

CVE-2024-10635

Proofpoint Enterprise Protection’s Attachment Defense has an improper input validation vulnerability in S/MIME attachment handling that allows an unauthenticated remote attacker to bypass attachment scanning by sending a malicious S/MIME attachment with an opaque signature. When opened by a recip...

CVE-2024-10635 Enterprise Protection S/MIME Opaque Signature Attachment Scanning Bypass

Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthenticated remote attacker to bypass attachment scanning security policy by sending a malicious S/MIME attachment with an opaque signature. When opened by a recipient in a downstrea...