Tesla

Products

Exploited and recent CVEs

• CVE-2025-34251 High 8.6 Tesla Telematics Control Unit (TCU) < v2025.14 Authentication Bypass 0.4%
• CVE-2025-6785 Medium 4.7 Tesla Model 3 Physical CAN Bus Injection 0.2%
• CVE-2025-8320 High 8.8 Tesla Wall Connector Content-Length Header Improper Input Validation Remote Code Execution Vulnerability 0.4%
• CVE-2025-8321 Medium 6.8 Tesla Wall Connector Firmware Downgrade Vulnerability 0.4%
• CVE-2025-2082 High 7.5 Tesla Model 3 VCSEC Integer Overflow Remote Code Execution Vulnerability 0.4%
• CVE-2024-6032 High 7.8 Tesla Model S Iris Modem ql_atfwd Command Injection Code Execution Vulnerability 0.5%
• CVE-2024-6030 High 7.0 Tesla Model S oFono Unnecessary Privileges Sandbox Escape Vulnerability 0.2%
• CVE-2024-13943 High 7.8 Tesla Model S Iris Modem QCMAP_ConnectionManager Improper Input Validation Sandbox Escape Vulnerability 0.2%
• CVE-2024-6031 High 7.8 Tesla Model S oFono AT Command Heap-based Buffer Overflow Code Execution Vulnerability 0.2%
• CVE-2024-6029 Medium 5.0 Tesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability 0.2%
• CVE-2023-32157 Medium 4.6 Tesla Model 3 bsa_server BIP Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability 0.4%
• CVE-2023-32156 Critical 9.0 Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability 0.4%
• CVE-2023-32155 High 7.8 Tesla Model 3 bcmdhd Out-Of-Bounds Write Local Privilege Escalation Vulnerability 0.2%
• CVE-2022-42431 High 8.8 This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles. An attacker must first obtain the ability to execute privileged code on the target system in order to explo 0.3%
• CVE-2022-42430 High 8.8 This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles. An attacker must first obtain the ability to execute privileged code on the target system in order to explo 0.4%
• CVE-2022-3093 High 7.6 This vulnerability allows physical attackers to execute arbitrary code on affected Tesla vehicles. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ice 0.4%