CVE-2016-9337

Affected product/component: Tesla Motors Model S Gateway ECU (firmware prior to 7.1 (2.36.31) with web browser enabled). Vulnerability type/root cause: Command Injection in the Gateway ECU allowing an attacker to install malicious software and send messages to the vehicle CAN bus via a compromise...

PT-2017-10068

Name of the Vulnerable Software and Affected Versions Tesla Motors Model S automobile versions prior to 7.1 2.36.31 Description An issue was discovered in the vehicle's Gateway ECU, which is susceptible to commands that may allow an attacker to install malicious software. This could enable the...

CVE-2016-9337: Improper Neutralization of Special Elements used in a Command

An issue was discovered in Tesla Motors Model S automobile, all firmware versions before version 7.1 2.36.31 with web browser functionality enabled. The vehicle's Gateway ECU is susceptible to commands that may allow an attacker to install malicious software allowing the attacker to send messages...

Tesla Motors (Beta) - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Tesla Motors Beta published at the 'play' market has multiple vulnerabilities...

Tesla Motors Starts Bug Bounty--But Not For Its Cars

Tesla Motors has started a bug bounty program that will pay researchers up to $1,000 for disclosing vulnerabilities. However, the rewards don’t apply to bugs found in the company’s vehicles. The program’s scope is quite narrow, with only the main teslamotors.com domain and other domains owned by...