HIGH🇬🇧 English

CVE-2023-32155

CVSS 7.0v3.1pub. 2024-05-03upd. 2025-08-13

Tesla Model 3 bcmdhd Out-Of-Bounds Write Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to execute code on the wifi subsystem in order to exploit this vulnerability. The specific flaw exists within the bcmdhd driver. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel. . Was ZDI-CAN-20733.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Tesla Model 3

    HW
    Tesla
    wszystkie wersje

  • Tesla Model 3 Firmware

    OS
    Tesla
    2023.6
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCELPEMemory
CWE
Referencje

Powiązane podatności

CVE-2025-2082HIGH7.5ten sam produkt

Tesla Model 3 VCSEC Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-ad...

CVE-2023-32156HIGH8.8ten sam produkt

Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability. This vulnerability allows network-ad...

CVE-2023-32157HIGH7.5ten sam produkt

Tesla Model 3 bsa_server BIP Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerabi...

CVE-2022-42430HIGH7.8ten sam produkt

This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles. An attacker must ...

CVE-2022-42431HIGH7.8ten sam produkt

This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles. An attacker must ...