PT-2020-12201 · Tesla · Tesla Model 3

Published 2020-03-20 · Updated 2025-03-24 · CVE-2020-10558

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Tesla Model 3 versions prior to 2020.4.10

Description The issue allows Denial of Service to occur due to improper process separation, which enables attackers to disable various functions from the main screen, including the speedometer, web browser, climate controls, turn signal visual and sounds, navigation, autopilot notifications, and other miscellaneous functions.

Recommendations For Tesla Model 3 versions prior to 2020.4.10, update to version 2020.4.10 or later to resolve the issue. As a temporary workaround, consider restricting access to the driving interface to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2020-10558

Affected Products

Tesla Model 3

References · 16

• 🔥 https://github.com/nullze/CVE-2020-10558 · Exploit
• 🔥 https://github.com/nuzzl/CVE-2020-10558 · Exploit
• 🔥 https://safekeepsecurity.com/about/cve-2020-10558 · Exploit
• 🔥 https://cylect.io/blog/Tesla_Model_3_Vuln · Exploit
• https://osv.dev/vulnerability/CVE-2020-10558 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10558 · Security Note
• https://github.com/nuzzl/Tesla-Tester · Note
• https://t.me/defcon_news/41870 · Telegram Post
• https://twitter.com/grok/status/1899939508042252601 · Twitter Post
• https://twitter.com/Tyler46409827/status/1904289968316682361 · Twitter Post
• https://t.me/cybersecuritytechnologies/5275 · Telegram Post
• https://twitter.com/BSides_ABQ/status/1698811600747344350 · Twitter Post
• https://t.me/cvenotify/1969 · Telegram Post
• https://t.me/rnetsec/11827 · Telegram Post
• https://t.me/malwr/2860 · Telegram Post