Tesla Model S Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Tesla Model S Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2024-6032 — CVSS 7.8 (high): Tesla Model S Iris Modem ql_atfwd Command Injection Code Execution Vulnerability. This vulnerability allows local attackers to execute…
• CVE-2024-13943 — CVSS 7.8 (high): Tesla Model S Iris Modem QCMAP_ConnectionManager Improper Input Validation Sandbox Escape Vulnerability. This vulnerability allows local…
• CVE-2024-6031 — CVSS 7.8 (high): Tesla Model S oFono AT Command Heap-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to…
• CVE-2022-27948 — CVSS 7.2 (high): Certain Tesla vehicles through 2022-03-26 allow attackers to open the charging port via a 315 MHz RF signal containing a fixed sequence of…
• CVE-2024-6030 — CVSS 7.0 (high): Tesla Model S oFono Unnecessary Privileges Sandbox Escape Vulnerability. This vulnerability allows local attackers to escape the sandbox on…
• CVE-2022-3093 — CVSS 6.4 (medium): This vulnerability allows physical attackers to execute arbitrary code on affected Tesla vehicles. Authentication is not required to…
• CVE-2024-6029 — CVSS 5.0 (medium): Tesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass the…