CVE-2022-3093 in Model 3信息

摘要

由 MITRE • 2023-03-29

This vulnerability allows physical attackers to execute arbitrary code on affected Tesla vehicles. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ice_updater update mechanism. The issue results from the lack of proper validation of user-supplied firmware. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-17463.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2022-09-01

披露

2023-03-29

管理

已接受

条目

VDB-211344

CPE

准备好

CWE

CWE-367 (已确认)

CVSS

6.8 (VulDB)

EPSS

0.00439

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2022-3093
NVD	https://nvd.nist.gov/vuln/detail/CVE-2022-3093
CVE Details	https://www.cvedetails.com/cve/CVE-2022-3093/

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!