📦

model_y

Vendor: tesla

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 1 Remote Access
Total CVEs 1 Total Indexed
Avg. EPSS 0.44% Exploit Prob.
Latest CVE CVE-2022-3093 Mar 29

Security Vulnerability Index

Page 1 / 1
6.4 CVSS
CVE-2022-3093
RCE

This vulnerability allows physical attackers to execute arbitrary code on affected Tesla vehicles. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ice_updater update mechanism. The issue results from the lack of proper validation of user-supplied firmware. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-17463.

EPSS: 0.44%