Firmware Update Vulnerability in Tesla Model X Key Fobs
CVE-2020-29438

6.5MEDIUM

Key Information:

Vendor

Tesla

Status
Model X Firmware
Vendor
CVE Published:
30 November 2020

What is CVE-2020-29438?

Tesla Model X key fobs produced before November 23, 2020, are vulnerable due to their ability to accept firmware updates without signature verification. This significant oversight allows malicious actors to create unauthorized firmware capable of retrieving sensitive unlock codes from a secure enclave chip within the vehicle. As a result, this could lead to unauthorized access, posing a critical security risk to vehicle owners.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.wired.com/story/tesla-model-x-hack-bluetooth/
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.