Remote Code Execution Issue in Tesla Wall Connector Due to Input Validation Flaws
CVE-2025-8320

8.8HIGH

Key Information:

Vendor

Tesla

Vendor
CVE Published:
30 July 2025

What is CVE-2025-8320?

The Tesla Wall Connector has a vulnerability stemming from improper validation of the HTTP Content-Length header. This flaw permits network-adjacent attackers to execute arbitrary code on affected devices without requiring authentication. The vulnerability results from a failure to adequately validate user-supplied data, which may lead to memory access violations and unauthorized code execution in the context of the device. This could potentially compromise the operation of the Wall Connector and introduce security risks, making it imperative for users to address this issue promptly.

Affected Version(s)

Wall Connector 24.44.1

References

CVSS V3.0

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.