35 matches found
TeslaMate - Unauthenticated Access Detection
A misconfig in Teslamate allows unauthorized access to /settings endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """A misconfig in Teslamate allows unauthorized access to /settings endpoint.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...
CVE-2023-29857
An issue in Teslamate v1.27.1 allows attackers to obtain sensitive information via directly accessing the teslamate link...
CVE-2022-23126
TeslaMate before 1.25.1 when using the default Docker configuration allows attackers to open doors of Tesla vehicles, start Keyless Driving, and interfere with vehicle operation en route. This occurs because an attacker can leverage Grafana login access to obtain a token for Tesla API calls...
EUVD-2022-28217
Malicious code in bioql PyPI...
EUVD-2023-33394
Malicious code in bioql PyPI...
CVE-2023-31634
In TeslaMate before 1.27.2, there is unauthorized access to port 4000 for remote viewing and operation of user data. After accessing the IP address for the TeslaMate instance, an attacker can switch the port to 3000 to enter Grafana for remote operations. At that time, the default username and...
CVE-2023-31634
In TeslaMate before 1.27.2, there is unauthorized access to port 4000 for remote viewing and operation of user data. After accessing the IP address for the TeslaMate instance, an attacker can switch the port to 3000 to enter Grafana for remote operations. At that time, the default username and...
CVE-2023-31634
In TeslaMate before 1.27.2, there is unauthorized access to port 4000 for remote viewing and operation of user data. After accessing the IP address for the TeslaMate instance, an attacker can switch the port to 3000 to enter Grafana for remote operations. At that time, the default username and...
CVE-2023-31634
In TeslaMate before 1.27.2, there is unauthorized access to port 4000 for remote viewing and operation of user data. After accessing the IP address for the TeslaMate instance, an attacker can switch the port to 3000 to enter Grafana for remote operations. At that time, the default username and...
CVE-2023-31634
In TeslaMate before 1.27.2, there is unauthorized access to port 4000 for remote viewing and operation of user data. After accessing the IP address for the TeslaMate instance, an attacker can switch the port to 3000 to enter Grafana for remote operations. At that time, the default username and...
TeslaMate security vulnerabilities
TeslaMate is an open source project, a self-hosted data logger for Tesla. A security vulnerability exists in versions of TeslaMate prior to 1.27.2. After accessing the IP address of a TeslaMate instance, an attacker could switch port to 3000 and enter Grafana to perform remote operations...
CVE-2023-31634
In TeslaMate before 1.27.2, there is unauthorized access to port 4000 for remote viewing and operation of user data. After accessing the IP address for the TeslaMate instance, an attacker can switch the port to 3000 to enter Grafana for remote operations. At that time, the default username and...
CVE-2023-31634
TeslaMate versions prior to 1.27.2 are vulnerable to unauthorized access to port 4000, allowing remote viewing and operation of user data. An attacker can access the TeslaMate instance IP and switch to port 3000 to enter the Grafana management console. Due to a related issue (CVE-2022-23126), the...
CVE-2023-31634: Improper Authentication
In TeslaMate before 1.27.2, there is unauthorized access to port 4000 for remote viewing and operation of user data. After accessing the IP address for the TeslaMate instance, an attacker can switch the port to 3000 to enter Grafana for remote operations. At that time, the default username and...
PT-2024-12286 · Teslamate +1 · Teslamate +1
Name of the Vulnerable Software and Affected Versions: TeslaMate versions prior to 1.27.2 Description: The issue allows unauthorized access to port 4000 for remote viewing and operation of user data. An attacker can access the IP address for the TeslaMate instance, switch the port to 3000 to ente...
CVE-2023-29857
An issue in Teslamate v1.27.1 allows attackers to obtain sensitive information via directly accessing the teslamate link...
CVE-2023-29857
An issue in Teslamate v1.27.1 allows attackers to obtain sensitive information via directly accessing the teslamate link...
Information disclosure
An issue in Teslamate v1.27.1 allows attackers to obtain sensitive information via directly accessing the teslamate link...