CVE-2020-29438

Tesla Model X vehicles before 2020-11-23 have key fobs that accept firmware updates without signature verification

published November 30, 2020

CVSS
—
EPSS
0%
Percentile
34.3
In the wild
Unconfirmed
What it is

Tesla Model X vehicles before 2020-11-23 have key fobs that accept firmware updates without signature verification. This allows attackers to construct firmware that retrieves an unlock code from a secure enclave chip.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00411 · 34.3th percentile
Published
2020-11-30T21:24Z
EPSS history
Timeline
  • 30 NOV 21:24Z
    Tesla Model X vehicles before 2020-11-23 have key fobs that accept firmware updates without signature verification
    cvelistv5