CVE-2024-6032

Name of the Vulnerable Software and Affected Versions Tesla Model S Iris Modem (affected versions not specified)

Description This issue allows local attackers to execute arbitrary code on affected Tesla Model S vehicles. The flaw exists within the ql atfwd process due to the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this to execute code on the target modem in the context of root.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.