PT-2020-17162
CVE-2020-29439
·
تاريخ النشر
2020-11-30
·
تاريخ التحديث
2020-12-04
الوصف من
CVSS 3.1
4.6
متوسطةالمقاييسAV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Tesla Model X vehicles before 2020-11-23
Description
The key fobs of the affected vehicles rely on five VIN digits for authentication to initiate a Bluetooth wake-up action through the body control module (BCM). The full VIN is visible from outside the vehicle.
Recommendations
For Tesla Model X vehicles before 2020-11-23, consider restricting access to the vehicle's Bluetooth functionality until a fix is applied, as the key fobs' reliance on partial VIN digits for authentication poses a security risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾