Vulnerability · Published Jul 23, 2020 · Assigned by mitre
CVE-2020-15912
Medium 6.5
In plain English
A medium-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 68% of all known vulnerabilities).
Severity (CVSS NVD)6.5Medium
Exploit odds (30 days)1.2%top 31.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Tesla Model 3 vehicles allow attackers to open a door by leveraging access to a legitimate key card, and then using NFC Relay. NOTE: the vendor has developed Pin2Drive to mitigate this issue
Affected products (as reported)
References
- https://cansecwest.com/post/2020-03-09-22:00:00_2020_Speakers x_refsource_MISC
- https://www.youtube.com/watch?v=kQWg-Ywv3S4 x_refsource_MISC
- https://www.youtube.com/watch?v=VYKsfgox-bs x_refsource_MISC
- https://twitter.com/Kevin2600/status/1218892338182836224 x_refsource_MISC
- https://www.youtube.com/watch?v=nn-_3AbtEkI x_refsource_MISC
- https://www.carhackingvillage.com/speaker-bios#htm3nrr x_refsource_MISC