Model 3 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:tesla:model_3_firmware:2023.6:*:*:*:*:*:*:*
part: o version: 2023.6 update: *
| Vendor | Tesla (559dd2d7-3b10-56d2-98ee-68e9ad8fd3b4) |
|---|---|
| Product | Model 3 Firmware (c65ed0ff-b055-5f3b-8b0d-53d038b376a8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-32157 |
vulnerable | 2026-06-03 14:51:57.724557 |
Tesla Model 3 bsa_server BIP Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability
MEDIUM (4.6)
Tesla Model 3 bsa_server BIP Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability.
The specific flaw exists within the bsa_server process. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of an unprivileged user in a sandboxed process.
. Was ZDI-CAN-20737.
Published: 2024-05-03T01:56:39.627Z
Updated: 2024-09-18T18:28:22.099Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32156 |
vulnerable | 2026-06-03 14:51:57.724174 |
Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability
CRITICAL (9)
Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to execute privileged code on the Tesla infotainment system in order to exploit this vulnerability.
The specific flaw exists within the handling of firmware updates. The issue results from improper error-handling during the update process. An attacker can leverage this vulnerability to execute code in the context of Tesla's Gateway ECU.
. Was ZDI-CAN-20734.
Published: 2024-05-03T01:56:38.929Z
Updated: 2024-09-18T18:28:21.387Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32155 |
vulnerable | 2026-06-03 14:51:57.723035 |
Tesla Model 3 bcmdhd Out-Of-Bounds Write Local Privilege Escalation Vulnerability
HIGH (7.8)
Tesla Model 3 bcmdhd Out-Of-Bounds Write Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to execute code on the wifi subsystem in order to exploit this vulnerability.
The specific flaw exists within the bcmdhd driver. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel.
. Was ZDI-CAN-20733.
Published: 2024-05-03T01:56:38.175Z
Updated: 2024-09-18T18:28:20.625Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.