Skip to content
Noroxi

Tesla records

24 published records for vendor tesla.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
5
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

Bug bounty scope

The product’s vendor appears in a public program. Matched by name; verify the scope text in the program.

All records

24 records
  • CVE-2019-9977
    36Monitor

    The renderer process in the entertainment system on Tesla Model 3 vehicles mishandles JIT compilation, which allows attackers to trigger fir

    HighCVSS 8.8No exploitEPSS 3%

    tesla · model 3 firmwareMar 24, 2019

  • CVE-2020-9306
    35Monitor

    Tesla SolarCity Solar Monitoring Gateway through 5.46.43 has a "Use of Hard-coded Credentials" issue because Digi ConnectPort X2e uses a .py

    HighCVSS 8.8No exploitEPSS 1%

    tesla · solarcity solar monitoring gatewayFeb 17, 2021

  • CVE-2023-32156
    35Monitor

    Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    tesla · model 3 firmwareMay 2, 2024

  • CVE-2025-8320
    35Monitor

    Tesla Wall Connector Content-Length Header Improper Input Validation Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    tesla · wall connector firmwareJul 29, 2025

  • CVE-2024-6032
    31Monitor

    Tesla Model S Iris Modem ql_atfwd Command Injection Code Execution Vulnerability

    HighCVSS 7.8No exploitEPSS 0%

    tesla · model s firmwareApr 30, 2025

  • CVE-2022-42430
    31Monitor

    This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles.

    HighCVSS 7.8No exploitEPSS 0%

    tesla · model 3 firmwareMar 29, 2023

  • CVE-2022-42431
    31Monitor

    This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles.

    HighCVSS 7.8No exploitEPSS 0%

    tesla · model 3 firmwareMar 29, 2023

  • CVE-2024-6031
    31Monitor

    Tesla Model S oFono AT Command Heap-based Buffer Overflow Code Execution Vulnerability

    HighCVSS 7.8No exploitEPSS 0%

    tesla · model s firmwareApr 30, 2025

  • CVE-2024-13943
    31Monitor

    Tesla Model S Iris Modem QCMAP_ConnectionManager Improper Input Validation Sandbox Escape Vulnerability

    HighCVSS 7.8No exploitEPSS 0%

    tesla · model s firmwareApr 30, 2025

  • CVE-2023-32157
    30Monitor

    Tesla Model 3 bsa_server BIP Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    tesla · model 3 firmwareMay 2, 2024

  • CVE-2025-2082
    30Monitor

    Tesla Model 3 VCSEC Integer Overflow Remote Code Execution Vulnerability

    HighCVSS 7.5Proof of conceptEPSS 0%

    tesla · model 3 firmwareApr 30, 2025

  • CVE-2016-9337
    28Monitor

    An issue was discovered in Tesla Motors Model S automobile, all firmware versions before version 7.1 (2.36.31) with web browser functionalit

    MediumCVSS 6.8No exploitEPSS 1%

    tesla · gateway ecuFeb 13, 2017

  • CVE-2023-32155
    28Monitor

    Tesla Model 3 bcmdhd Out-Of-Bounds Write Local Privilege Escalation Vulnerability

    HighCVSS 7.0No exploitEPSS 0%

    tesla · model 3 firmwareMay 2, 2024

  • CVE-2024-6030
    28Monitor

    Tesla Model S oFono Unnecessary Privileges Sandbox Escape Vulnerability

    HighCVSS 7.0No exploitEPSS 0%

    tesla · model s firmwareApr 30, 2025

  • CVE-2020-10558
    27Monitor

    The driving interface of Tesla Model 3 vehicles in any release before 2020.4.10 allows Denial of Service to occur due to improper process se

    MediumCVSS 6.5Proof of conceptEPSS 2%

    tesla · model 3 web interfaceMar 20, 2020

  • CVE-2025-8321
    27Monitor

    Tesla Wall Connector Firmware Downgrade Vulnerability

    MediumCVSS 6.8No exploitEPSS 0%

    tesla · wall connector firmwareJul 29, 2025

  • CVE-2020-15912
    26Monitor

    Tesla Model 3 vehicles allow attackers to open a door by leveraging access to a legitimate key card, and then using NFC Relay.

    MediumCVSS 6.5No exploitEPSS 1%

    tesla · model 3 firmwareJul 23, 2020

  • CVE-2020-29438
    26Monitor

    Tesla Model X vehicles before 2020-11-23 have key fobs that accept firmware updates without signature verification.

    MediumCVSS 6.5No exploitEPSS 0%

    tesla · model x firmwareNov 30, 2020

  • CVE-2022-3093
    25Monitor

    This vulnerability allows physical attackers to execute arbitrary code on affected Tesla vehicles.

    MediumCVSS 6.4No exploitEPSS 0%

    tesla · model 3 firmwareMar 29, 2023

  • CVE-2022-37709
    21Monitor

    Tesla Model 3 V11.0(2022.4.5.1 6b701552d7a6) Tesla mobile app v4.23 is vulnerable to Authentication Bypass by spoofing.

    MediumCVSS 5.3No exploitEPSS 0%

    tesla · model 3 firmwareSep 16, 2022

  • CVE-2024-6029
    20Monitor

    Tesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability

    MediumCVSS 5.0No exploitEPSS 0%

    tesla · model s firmwareApr 30, 2025

  • CVE-2020-29439
    18Monitor

    Tesla Model X vehicles before 2020-11-23 have key fobs that rely on five VIN digits for the authentication needed for a body control module

    MediumCVSS 4.6No exploitEPSS 0%

    tesla · model x firmwareNov 30, 2020

  • CVE-2020-29440
    18Monitor

    Tesla Model X vehicles before 2020-11-23 do not perform certificate validation during an attempt to pair a new key fob with the body control

    MediumCVSS 4.6No exploitEPSS 0%

    tesla · model x firmwareNov 30, 2020

  • CVE-2022-27948
    17Monitor

    Certain Tesla vehicles through 2022-03-26 allow attackers to open the charging port via a 315 MHz RF signal containing a fixed sequence of a

    MediumCVSS 4.3No exploitEPSS 1%

    tesla · model 3 firmwareMar 27, 2022