PT-2020-17163
CVE-2020-29440
·
تاريخ النشر
2020-11-30
·
تاريخ التحديث
2020-12-04
الوصف من
CVSS 3.1
4.6
متوسطةالمقاييسAV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Tesla Model X vehicles before 2020-11-23
Description
The issue allows an attacker, who is inside a vehicle or able to send data over the CAN bus, to start and drive the vehicle with a spoofed key fob. This is possible because the vehicles do not perform certificate validation during an attempt to pair a new key fob with the body control module (BCM).
Recommendations
For Tesla Model X vehicles before 2020-11-23, update the software to a version that includes certificate validation for key fob pairing to prevent spoofing attacks.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾