ZDI-23-972: (Pwn2Own) Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to execute privileged code on the Tesla infotainment system in order to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-972?
The severity of ZDI-23-972 is considered critical due to the potential for arbitrary code execution.
How do I fix ZDI-23-972?
To fix ZDI-23-972, ensure that your Tesla Model 3 is updated with the latest software patch released by Tesla.
Who is affected by ZDI-23-972?
ZDI-23-972 affects all Tesla Model 3 vehicles that have not been patched against this vulnerability.
What type of vulnerability is ZDI-23-972?
ZDI-23-972 is a remote code execution vulnerability that can be exploited by network-adjacent attackers.
Can ZDI-23-972 be exploited without physical access?
Yes, ZDI-23-972 can potentially be exploited remotely if an attacker gains access to execute privileged code on the infotainment system.