Описание
Tesla Model 3 V11.0(2022.4.5.1 6b701552d7a6) Tesla mobile app v4.23 is vulnerable to Authentication Bypass by spoofing. Tesla Model 3's Phone Key authentication is vulnerable to Man-in-the-middle attacks in the BLE channel. It allows attackers to open a door and drive the car away by leveraging access to a legitimate Phone Key.
Ссылки
- ExploitTechnical DescriptionThird Party Advisory
- Third Party Advisory
- ExploitThird Party Advisory
- ExploitTechnical DescriptionThird Party Advisory
- Third Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:tesla:model_3_firmware:11.0:*:*:*:*:*:*:*
cpe:2.3:h:tesla:model_3:-:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:a:tesla:tesla:4.23:*:*:*:*:android:*:*
EPSS
Процентиль: 24%
0.00079
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-290
Связанные уязвимости
CVSS3: 5.3
github
больше 3 лет назад
Tesla Model 3 V11.0(2022.4.5.1 6b701552d7a6) Tesla mobile app v4.23 is vulnerable to Authentication Bypass by spoofing. Tesla Model 3's Phone Key authentication is vulnerable to Man-in-the-middle attacks in the BLE channel. It allows attackers to open a door and drive the car away by leveraging access to a legitimate Phone Key.
EPSS
Процентиль: 24%
0.00079
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-290