ZDI-23-971: (Pwn2Own) Tesla Model 3 bcmdhd Out-Of-Bounds Write Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to execute code on the wifi subsystem in order to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-971?
The severity of ZDI-23-971 is considered high due to the potential for privilege escalation on affected Tesla Model 3 vehicles.
How do I fix ZDI-23-971?
To fix ZDI-23-971, Tesla recommends applying the latest firmware updates to the Model 3 vehicle.
Who is affected by ZDI-23-971?
Owners of Tesla Model 3 vehicles are affected by ZDI-23-971 if their vehicles have not been updated with the latest security patches.
How can attackers exploit ZDI-23-971?
Attackers can exploit ZDI-23-971 by gaining access to the wifi subsystem and executing malicious code to escalate privileges.
What types of attacks are possible with ZDI-23-971?
Possible attacks with ZDI-23-971 include local privilege escalation, which may allow an attacker to gain more control over the vehicle's systems.