CVE-2022-27948

Katalog CVE

CVSS 4.3 · Medium EPSS 1,4%

Kerentanan Missing Authorization pada tesla model 3 firmware, tesla model s firmware +1 lainnya. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

Certain Tesla vehicles through 2022-03-26 allow attackers to open the charging port via a 315 MHz RF signal containing a fixed sequence of approximately one hundred symbols. NOTE: the vendor's perspective is that the behavior is as intended

Rincian

Terbit di NVD

27 Maret 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.3 (Medium), sumber NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-862: Missing Authorization

EPSS (30 hari)

1,4% peluang dieksploitasi; lebih tinggi dari 72,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/pompel123/Tesla-Charging-Port-Opener advisory pihak ketiga
• https://twitter.com/IfNotPike/status/1507818836568858631 advisory pihak ketiga
• https://twitter.com/IfNotPike/status/1507852693699661827 exploit · advisory pihak ketiga