Vendors / Tesla Records 26 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 15
Exploited now Tesla records in CISA KEV No Tesla vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 44
The renderer process in the entertainment system on Tesla Model 3 vehicles mishandles JIT compilation, which allows attackers to trigger firmware code execution, and display a crafted message to vehicle occupants.
CVSS 3.0 HIGH 8.8· Network · No auth · User interaction · EPSS 0.03005 · Published 2019-03-24 · No fix listed
Priority MEDIUM 40
Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability.
CVSS 3.1 HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00429 · Published 2024-05-03 · No fix listed CWE-367
Priority LOW 36
This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00314 · Published 2023-03-29 · No fix listed CWE-120
Priority LOW 36
This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00367 · Published 2023-03-29 · No fix listed CWE-416
Priority LOW 35
Tesla Model 3 VCSEC Integer Overflow Remote Code Execution Vulnerability.
CVSS 3.0 HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.00383 · Published 2025-04-30 · No fix listed CWE-190
Priority LOW 35
Certain Tesla vehicles through 2022-03-26 allow attackers to open the charging port via a 315 MHz RF signal containing a fixed sequence of approximately one hundred symbols.
CVSS 3.1 HIGH 7.2· Network · No auth · No interaction · EPSS 0.01433 · Published 2022-03-27 · No fix listed CWE-862
Priority LOW 33
Tesla Model 3 bsa_server BIP Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability.
CVSS 3.1 HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.004 · Published 2024-05-03 · No fix listed CWE-122
Priority LOW 32
Tesla Model 3 bcmdhd Out-Of-Bounds Write Local Privilege Escalation Vulnerability.
CVSS 3.1 HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00219 · Published 2024-05-03 · No fix listed CWE-787
Priority LOW 31
This vulnerability allows physical attackers to execute arbitrary code on affected Tesla vehicles.
CVSS 3.1 MEDIUM 6.4· Physical · No auth · No interaction · EPSS 0.00442 · Published 2023-03-29 · No fix listed CWE-367
Priority LOW 31
Tesla Model 3 vehicles allow attackers to open a door by leveraging access to a legitimate key card, and then using NFC Relay.
CVSS 3.1 MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.0119 · Published 2020-07-23 · No fix listed
Priority LOW 25
Tesla Model 3 V11.0(2022.4.5.1 6b701552d7a6) Tesla mobile app v4.23 is vulnerable to Authentication Bypass by spoofing.
CVSS 3.1 MEDIUM 5.3· Adjacent network · No auth · No interaction · EPSS 0.00628 · Published 2022-09-16 · No fix listed CWE-290
Open these records in search → All records by CVSS severity
0 15 11 0 0
THREATIST.IORead the docs