Read the docs
TI-2018-12035 Aliases CVE-2018-16806GHSA-9vcq-v52v-wfm2

A Pektron Passive Keyless Entry and Start (PKES) system, as used on the Tesla Model S and…

Priority LOW 29CWE-327Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
None · High · None
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-327.

Summary

A Pektron Passive Keyless Entry and Start (PKES) system, as used on the Tesla Model S and possibly other vehicles, relies on the DST40 cipher, which makes it easier for attackers to obtain access via an approach involving a 5.4 TB precomputation, followed by wake-frame reception and two challenge/response operations, to clone a key fob within a few seconds.

Why it matters now

EPSS 0.0047 40th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:pektron:passive_keyless_entry_and_start_system_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerablePektron
cpe:2.3:h:pektron:passive_keyless_entry_and_start_system:-:*:*:*:*:*:*:*not specified by NVDRunning onPektron
  • cpe:2.3:o:pektron:passive_keyless_entry_and_start_system_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Pektron
  • cpe:2.3:h:pektron:passive_keyless_entry_and_start_system:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pektron

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-16806
  2. 2026-10-03 Alias added: GHSA-9vcq-v52v-wfm2

References

Exploit 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences