Vulnerability Details CVE-2022-27948
Certain Tesla vehicles through 2022-03-26 allow attackers to open the charging port via a 315 MHz RF signal containing a fixed sequence of approximately one hundred symbols. NOTE: the vendor's perspective is that the behavior is as intended
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 22.3%
CVSS Severity
CVSS v3 Score 7.2
CVSS v2 Score 3.3
References
- https://github.com/pompel123/Tesla-Charging-Port-Opener
- https://twitter.com/IfNotPike/status/1507818836568858631
- https://twitter.com/IfNotPike/status/1507852693699661827
- https://github.com/pompel123/Tesla-Charging-Port-Opener
- https://twitter.com/IfNotPike/status/1507818836568858631
- https://twitter.com/IfNotPike/status/1507852693699661827
Products affected by CVE-2022-27948
-
cpe:2.3:h:tesla:model_3:-
-
cpe:2.3:h:tesla:model_s:-
-
cpe:2.3:h:tesla:model_x:-
-
cpe:2.3:o:tesla:model_3_firmware:-
-
cpe:2.3:o:tesla:model_3_firmware:11.0
-
cpe:2.3:o:tesla:model_3_firmware:2022-03-26
-
cpe:2.3:o:tesla:model_s_firmware:-
-
cpe:2.3:o:tesla:model_s_firmware:2022-03-26
-
cpe:2.3:o:tesla:model_x_firmware:-
-
cpe:2.3:o:tesla:model_x_firmware:2020-11-23
-
cpe:2.3:o:tesla:model_x_firmware:2022-03-26