CVE-2018-16806

Name of the Vulnerable Software and Affected Versions Pektron Passive Keyless Entry and Start (PKES) system (affected versions not specified)

Description The issue concerns the Pektron Passive Keyless Entry and Start (PKES) system, which is used in vehicles such as the Tesla Model S. The system relies on the DST40 cipher, making it easier for attackers to gain access. The attack involves a precomputation of 5.4 TB, followed by wake-frame reception and two challenge/response operations, allowing attackers to clone a key fob within a few seconds.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.