ZDI-CAN-17463: (Pwn2Own) Tesla ice_updater Time-Of-Check Time-Of-Use Code Execution Vulnerability
This vulnerability allows physical attackers to execute arbitrary code on affected Tesla vehicles. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ice_updater update mechanism. The issue results from the lack of proper validation of user-supplied firmware. An attacker can leverage this vulnerability to execute code in the context of root.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tesla Model 3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of ZDI-CAN-17463?
The severity of ZDI-CAN-17463 is high due to the potential for arbitrary code execution without authentication.
How can ZDI-CAN-17463 be exploited?
ZDI-CAN-17463 can be exploited by physical attackers taking advantage of the flawed ice_updater mechanism in affected Tesla vehicles.
Which vehicles are affected by ZDI-CAN-17463?
ZDI-CAN-17463 specifically affects Tesla Model 3 vehicles.
What are the potential impacts of ZDI-CAN-17463?
The potential impacts of ZDI-CAN-17463 include unauthorized control over vehicle functions and data.
How do I mitigate ZDI-CAN-17463?
Mitigation of ZDI-CAN-17463 involves applying firmware updates provided by Tesla that address the vulnerability.
- agent/softwarecombine
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-22-1188
- alias/ZDI-CAN-17463
- alias/CVE-2022-3093
- agent/software-canonical-lookup
- agent/references
- agent/title
- agent/severity
- agent/type
- agent/description
- agent/event
- agent/tags
- agent/source
- vendor/tesla
- canonical/tesla model 3