PT-2019-13437 · Tesla+2 · Tesla Model S+3

Publicado 2019-11-15 · Atualizado 2020-01-02 · CVE-2019-13581

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Marvell 88W8688 Wi-Fi firmware versions prior to p52

Description A heap-based buffer overflow issue allows remote attackers to cause a denial of service or execute arbitrary code via malformed Wi-Fi packets. This issue affects Tesla Model S/X vehicles manufactured before March 2018, which use the Parrot Faurecia Automotive FC6050W module.

Recommendations For Marvell 88W8688 Wi-Fi firmware versions prior to p52, update to version p52 or later to resolve the issue. As a temporary workaround, consider restricting Wi-Fi connectivity to trusted sources until the update is applied.

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2019-13581

Produtos afetados

Marvell 88W8688 Wi-Fi

Parrot Faurecia Automotive Fc6050W

Tesla Model S

Tesla Model X

Referências · 4

• https://keenlab.tencent.com/en/2020/01/02/exploiting-wifi-stack-on-tesla-model-s · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-13581 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-13581 · Aviso do Fabricante
• https://marvell.com/documents/ioaj5dntk2ubykssa78s · Aviso do Fabricante