CVE-2025-34251

Name of the Vulnerable Software and Affected Versions Tesla Telematics Control Unit (TCU) firmware versions prior to 2025.14

Description The Tesla Telematics Control Unit (TCU) firmware is susceptible to an authentication bypass. The TCU operates the Android Debug Bridge (adbd) with root privileges. Despite a security check intended to disable adb shell access, adb push/pull and adb forward functionalities remain accessible. An attacker with physical access can exploit this by writing an arbitrary file to a writable location and subsequently overwriting the kernel’s uevent helper or /proc/sys/kernel/hotplug entries through ADB. This allows for the execution of scripts with root privileges.

Recommendations Update Tesla Telematics Control Unit (TCU) firmware to version 2025.14 or later.