CVE-2023-32157: (Pwn2Own) Tesla Model 3 bsa_server BIP Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability
Tesla Model 3 bsaserver BIP Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability.
The specific flaw exists within the bsaserver process. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of an unprivileged user in a sandboxed process. . Was ZDI-CAN-20737.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-32157?
CVE-2023-32157 is classified as a critical vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2023-32157?
To mitigate CVE-2023-32157, Tesla owners should ensure their vehicle software is updated to the latest version provided by Tesla.
Who is impacted by CVE-2023-32157?
CVE-2023-32157 affects Tesla Model 3 vehicles that are vulnerable to network-adjacent Bluetooth attacks.
What type of vulnerability is CVE-2023-32157?
CVE-2023-32157 is a heap-based buffer overflow vulnerability that allows code execution.
Can CVE-2023-32157 be exploited remotely?
CVE-2023-32157 requires an attacker to be network-adjacent to exploit the vulnerability.