PT-2018-13758 · Tesla+1 · Tesla Model S+1

Eduard Marin + 2 · Published 2018-09-10 · Updated 2019-10-03 · CVE-2018-16806

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:A/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Pektron Passive Keyless Entry and Start (PKES) system (affected versions not specified)

Description The issue concerns the Pektron Passive Keyless Entry and Start (PKES) system, which is used in vehicles such as the Tesla Model S. The system relies on the DST40 cipher, making it easier for attackers to gain access. The attack involves a precomputation of 5.4 TB, followed by wake-frame reception and two challenge/response operations, allowing attackers to clone a key fob within a few seconds.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2018-16806

Affected Products

Pektron Pkes

Tesla Model S

References · 2

• 🔥 https://esat.kuleuven.be/cosic/fast-furious-and-insecure-passive-keyless-entry-and-start-in-modern-supercars · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-16806 · Security Note