Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pjjj-hpx9-qmc6

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Tesla Model X vehicles before 2020-11-23 have key fobs that accept firmware updates without signature verification. This allows attackers to construct firmware that retrieves an unlock code from a secure enclave chip.

Tesla Model X vehicles before 2020-11-23 have key fobs that accept firmware updates without signature verification. This allows attackers to construct firmware that retrieves an unlock code from a secure enclave chip.

EPSS

Процентиль: 25%
0.00086
Низкий

Дефекты

CWE-347

Связанные уязвимости

CVSS3: 6.5
nvd
около 5 лет назад

Tesla Model X vehicles before 2020-11-23 have key fobs that accept firmware updates without signature verification. This allows attackers to construct firmware that retrieves an unlock code from a secure enclave chip.

EPSS

Процентиль: 25%
0.00086
Низкий

Дефекты

CWE-347