Tesla Model X Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Tesla Model X Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2022-27948 — CVSS 7.2 (high): Certain Tesla vehicles through 2022-03-26 allow attackers to open the charging port via a 315 MHz RF signal containing a fixed sequence of…
• CVE-2020-29438 — CVSS 6.5 (medium): Tesla Model X vehicles before 2020-11-23 have key fobs that accept firmware updates without signature verification. This allows attackers…
• CVE-2022-3093 — CVSS 6.4 (medium): This vulnerability allows physical attackers to execute arbitrary code on affected Tesla vehicles. Authentication is not required to…
• CVE-2020-29439 — CVSS 4.6 (medium): Tesla Model X vehicles before 2020-11-23 have key fobs that rely on five VIN digits for the authentication needed for a body control module…
• CVE-2020-29440 — CVSS 4.6 (medium): Tesla Model X vehicles before 2020-11-23 do not perform certificate validation during an attempt to pair a new key fob with the body…