Read the docs
TI-2024-05588 Aliases CVE-2024-6030GHSA-8429-j533-fq73

Tesla Model S oFono Unnecessary Privileges Sandbox Escape Vulnerability

Priority LOW 32CWE-250Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
High
Impact type
Privilege escalation
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · CNA. Fix status from CNA. Impact type from CWE-250.

Summary

Tesla Model S oFono Unnecessary Privileges Sandbox Escape Vulnerability. This vulnerability allows local attackers to escape the sandbox on affected Tesla Model S vehicles. An attacker must first obtain the ability to execute code within the sandbox on the target system in order to exploit this vulnerability. The specific flaw exists within the oFono process. The process allows an attacker to modify interfaces. An attacker can leverage this vulnerability to bypass the iptables network sandbox. Was ZDI-CAN-23200.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00173 6th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
TeslaModel S2023.44.29—No fix listedCNA
  • Model S VendorTesla Affected 2023.44.29 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:tesla:model_s_firmware:*:*:*:*:*:*:*:*before 2024.8VulnerableTesla
cpe:2.3:h:tesla:model_s:-:*:*:*:*:*:*:*not specified by NVDRunning onTesla
  • cpe:2.3:o:tesla:model_s_firmware:*:*:*:*:*:*:*:* Versions before 2024.8 Vulnerable ·Tesla
  • cpe:2.3:h:tesla:model_s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Tesla

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-6030
  2. 2026-10-03 Alias added: GHSA-8429-j533-fq73

References

Advisory 1

  • TI-2024-05590 OS command injection in Tesla Model S CVSS 3.0HIGH 7.8
  • TI-2024-12955 Improper input validation in Tesla Model S CVSS 3.0HIGH 7.8
  • TI-2024-05589 Heap-based buffer overflow in Tesla Model S CVSS 3.0HIGH 7.8
  • TI-2022-10816 Certain Tesla vehicles through 2022-03-26 allow attackers to open the charging port via a… CVSS 3.1HIGH 7.2
  • TI-2022-02854 Time-of-check time-of-use race condition in Tesla Model 3 CVSS 3.1MEDIUM 6.4
  • TI-2024-05587 Time-of-check time-of-use race condition in Tesla Model S CVSS 3.0MEDIUM 5.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences