ZDI-25-264: (Pwn2Own) Tesla Model S Iris Modem ql_atfwd Command Injection Code Execution Vulnerability
This vulnerability allows local attackers to execute arbitrary code on affected Tesla Model S vehicles. An attacker must first obtain the ability to execute code on the target system in order to exploit this vulnerability. The specific flaw exists within the qlatfwd process. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code on the target modem in the context of root.
Other sources
This vulnerability allows local attackers to execute arbitrary code on affected Tesla Model S vehicles. An attacker must first obtain the ability to execute code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-6032.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-25-264?
The severity of ZDI-25-264 is classified as critical due to its potential to allow local attackers to execute arbitrary code.
How do I fix ZDI-25-264?
To fix ZDI-25-264, ensure that your Tesla Model S is updated to the latest firmware provided by Tesla.
Which vehicles are affected by ZDI-25-264?
ZDI-25-264 specifically affects Tesla Model S vehicles that have the vulnerable firmware installed.
Who can exploit ZDI-25-264?
ZDI-25-264 can be exploited by local attackers who have already gained access to execute code on the target Tesla Model S system.
What component is vulnerable in ZDI-25-264?
The specific component vulnerable in ZDI-25-264 is the ql_atfwd process within the Tesla Model S firmware.