Key Fob Spoofing Risk in Tesla Model X Vehicles
CVE-2020-29440

4.6MEDIUM

Key Information:

Vendor

Tesla

Status
Model X Firmware
Vendor
CVE Published:
30 November 2020

What is CVE-2020-29440?

Tesla Model X vehicles manufactured prior to November 23, 2020, have a vulnerability that compromises the certificate validation process when pairing a new key fob with the body control module (BCM). This flaw enables an attacker with physical access to the vehicle, or capable of transmitting data over the Controller Area Network (CAN) bus, to start and operate the vehicle using a maliciously spoofed key fob, potentially leading to vehicle theft or unauthorized usage.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.wired.com/story/tesla-model-x-hack-bluetooth/
x_refsource_MISC

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.