PT-2019-13437 · Tesla+2 · Tesla Model S+3

Published 2019-11-15 · Updated 2020-01-02 · CVE-2019-13581

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Marvell 88W8688 Wi-Fi firmware versions prior to p52

Description A heap-based buffer overflow issue allows remote attackers to cause a denial of service or execute arbitrary code via malformed Wi-Fi packets. This issue affects Tesla Model S/X vehicles manufactured before March 2018, which use the Parrot Faurecia Automotive FC6050W module.

Recommendations For Marvell 88W8688 Wi-Fi firmware versions prior to p52, update to version p52 or later to resolve the issue. As a temporary workaround, consider restricting Wi-Fi connectivity to trusted sources until the update is applied.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2019-13581

Affected Products

Marvell 88W8688 Wi-Fi

Parrot Faurecia Automotive Fc6050W

Tesla Model S

Tesla Model X

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-13581 · Security Note
• https://osv.dev/vulnerability/CVE-2019-13581 · Vendor Advisory
• https://marvell.com/documents/ioaj5dntk2ubykssa78s · Vendor Advisory
• https://keenlab.tencent.com/en/2020/01/02/exploiting-wifi-stack-on-tesla-model-s · Note