CVE-2022-27948

The CVE-2022-27948 entry concerns certain Tesla vehicles through 2022-03-26 where a 315 MHz RF signal containing a fixed sequence of about one hundred symbols can be used to open the charging port. The vulnerability is framed around wireless access to the charging port via a specific RF payload; ...

CVE-2020-29440

Tesla Model X vehicles before 2020-11-23 are affected by CVE-2020-29440, where the system does not perform certificate validation when pairing a new key fob with the Body Control Module (BCM). This allows an attacker who is inside the vehicle or can send data over the CAN bus to start and drive t...

CVE-2020-29439

The CVE-2020-29439 entry concerns Tesla Model X vehicles manufactured before 2020-11-23, where key fobs use only the first five VIN digits for the authentication needed by a body control module (BCM) to initiate a Bluetooth wake-up action. The full VIN is visible from outside the vehicle, which i...

CVE-2020-29438

CVE-2020-29438 affects Tesla Model X key fob firmware prior to 2020-11-23. The vulnerability arises because key fobs accept firmware updates without signature verification, enabling an attacker to craft firmware that retrieves an unlock code from a secure enclave chip. Documents consistently desc...

CVE-2022-3093

The CVE-2022-3093 issue is a Tesla ice_updater firmware-update vulnerability where improper validation of user-supplied firmware allows a physical attacker to execute arbitrary code with root privileges. Multiple sources (ZDI advisory ZDI-22-1188 and Red Hat/CVEs) describe a TOCTOU‑style control ...