PT-2018-13758
CVE-2018-16806
·
تاريخ النشر
2018-09-10
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 2.0
3.3
منخفضةالمقاييسAV:A/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Pektron Passive Keyless Entry and Start (PKES) system (affected versions not specified)
Description
The issue concerns the Pektron Passive Keyless Entry and Start (PKES) system, which is used in vehicles such as the Tesla Model S. The system relies on the DST40 cipher, making it easier for attackers to gain access. The attack involves a precomputation of 5.4 TB, followed by wake-frame reception and two challenge/response operations, allowing attackers to clone a key fob within a few seconds.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾