PT-2025-35942 · Tesla · Tesla Model 3

Netanel Saka + 1 · Publicado 2025-09-04 · Atualizado 2025-09-04 · CVE-2025-6785

Positive Technologies (AI Summary)

CVSS v4.0

4.7

Média

Vetor base

AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:A/V:D/RE:L/U:Amber

Name of the Vulnerable Software and Affected Versions Tesla Model 3 versions 2023.Xx through 2023.43

Description Securing externally available CAN wires can easily allow physical access to the CAN bus, potentially enabling the injection of specially formed CAN messages to control remote start functions of the vehicle.

Recommendations Update software to version 2023.44 or later.

Correção

Special Elements Injection

Enumeração de Fraquezas

CWE-74

CWE-1263

Identificadores relacionados

CVE-2025-6785

Produtos afetados

Tesla Model 3

Referências · 4

• https://asrg.io/security-advisories/cve-2025-6785 · Nota
• https://twitter.com/CVEnew/status/1963617668453601742 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-6785 · Nota de Segurança
• https://t.me/CVEtracker/31700 · Publicação no Telegram