Bluetooth Authentication Vulnerability in Tesla Model X Key Fobs
CVE-2020-29439

4.6MEDIUM

Key Information:

Vendor

Tesla

Status
Model X Firmware
Vendor
CVE Published:
30 November 2020

What is CVE-2020-29439?

Tesla Model X vehicles manufactured before November 23, 2020, utilize a Bluetooth key fob system that relies on partial VIN information for authentication. This design exposes a security risk, as the key fob can be deceived by predicting the VIN digits required to initiate a Bluetooth wake-up action for the body control module (BCM). With the full VIN visible from outside the vehicle, attackers may exploit this weakness, potentially gaining unauthorized access to vehicle functionalities.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.wired.com/story/tesla-model-x-hack-bluetooth/
x_refsource_MISC

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.