Tesla
17 CVEs across 18 Tesla products. Browse Tesla vulnerabilities, severities, and proof-of-concept exploits.
Tesla products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-34251 | | 2025-10-07 | Tesla Telematics Control Unit (TCU) firmware prior to v2025.14 contains an authentication bypass vulnerability. The TCU runs the Android Debug Bridge (adbd) as… | |
CVE-2025-6785 | | 2025-09-04 | Securing externally available CAN wires can easily allow physical access to the CAN bus, allowing possible injection of specially formed CAN messages to contro… | |
CVE-2025-8321 | Medium | 6.8 | 2025-07-30 | Tesla Wall Connector Firmware Downgrade Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installatio… |
CVE-2025-8320 | High | 8.8 | 2025-07-30 | Tesla Wall Connector Content-Length Header Improper Input Validation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers… |
CVE-2025-2082 | High | 7.5 | 2025-04-30 | Tesla Model 3 VCSEC Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on aff… |
CVE-2024-6032 | High | 7.8 | 2025-04-30 | Tesla Model S Iris Modem ql_atfwd Command Injection Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affect… |
CVE-2024-6031 | High | 7.8 | 2025-04-30 | Tesla Model S oFono AT Command Heap-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on… |
CVE-2024-6030 | High | 7.0 | 2025-04-30 | Tesla Model S oFono Unnecessary Privileges Sandbox Escape Vulnerability. This vulnerability allows local attackers to escape the sandbox on affected Tesla Mode… |
CVE-2024-6029 | Medium | 5.0 | 2025-04-30 | Tesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass the firewall on the Iris… |
CVE-2024-13943 | High | 7.8 | 2025-04-30 | Tesla Model S Iris Modem QCMAP_ConnectionManager Improper Input Validation Sandbox Escape Vulnerability. This vulnerability allows local attackers to escape th… |
CVE-2023-32157 | High | 7.5 | 2024-05-03 | Tesla Model 3 bsa_server BIP Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute… |
CVE-2023-32156 | High | 8.8 | 2024-05-03 | Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on aff… |
CVE-2023-32155 | High | 7.0 | 2024-05-03 | Tesla Model 3 bcmdhd Out-Of-Bounds Write Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected… |
CVE-2022-42431 | High | 7.8 | 2023-03-29 | This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles. An attacker must first obtain the ability to execute privileged co… |
CVE-2022-42430 | High | 7.8 | 2023-03-29 | This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles. An attacker must first obtain the ability to execute privileged co… |
CVE-2022-3093 | Medium | 6.4 | 2023-03-29 | This vulnerability allows physical attackers to execute arbitrary code on affected Tesla vehicles. Authentication is not required to exploit this vulnerability… |
CVE-2022-37709 | Medium | 5.3 | 2022-09-16 | Tesla Model 3 V11.0(2022.4.5.1 6b701552d7a6) Tesla mobile app v4.23 is vulnerable to Authentication Bypass by spoofing. Tesla Model 3's Phone Key authenticatio… |
CVE-2022-27948 | High | 7.2 | 2022-03-27 | Certain Tesla vehicles through 2022-03-26 allow attackers to open the charging port via a 315 MHz RF signal containing a fixed sequence of approximately one hu… |
CVE-2020-9306 | High | 8.8 | 2021-02-18 | Tesla SolarCity Solar Monitoring Gateway through 5.46.43 has a "Use of Hard-coded Credentials" issue because Digi ConnectPort X2e uses a .pyc file to store the… |
CVE-2020-29440 | Medium | 4.6 | 2020-11-30 | Tesla Model X vehicles before 2020-11-23 do not perform certificate validation during an attempt to pair a new key fob with the body control module (BCM). This… |
CVE-2020-29439 | Medium | 4.6 | 2020-11-30 | Tesla Model X vehicles before 2020-11-23 have key fobs that rely on five VIN digits for the authentication needed for a body control module (BCM) to initiate a… |
CVE-2020-29438 | Medium | 6.5 | 2020-11-30 | Tesla Model X vehicles before 2020-11-23 have key fobs that accept firmware updates without signature verification. This allows attackers to construct firmware… |
CVE-2020-15912 | Medium | 6.5 | 2020-07-23 | Tesla Model 3 vehicles allow attackers to open a door by leveraging access to a legitimate key card, and then using NFC Relay. NOTE: the vendor has developed P… |
CVE-2020-10558 | Medium | 6.5 | 2020-03-20 | The driving interface of Tesla Model 3 vehicles in any release before 2020.4.10 allows Denial of Service to occur due to improper process separation, which all… |
CVE-2019-9977 | High | 8.8 | 2019-03-24 | The renderer process in the entertainment system on Tesla Model 3 vehicles mishandles JIT compilation, which allows attackers to trigger firmware code executio… |
CVE-2016-9337 | Medium | 6.8 | 2017-02-13 | An issue was discovered in Tesla Motors Model S automobile, all firmware versions before version 7.1 (2.36.31) with web browser functionality enabled. The vehi… |