PT-2025-18323 · Tesla · Tesla Model S

Published 2025-04-30 · Updated 2025-05-01 · CVE-2024-6029

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Tesla Model S (affected versions not specified)

Description This issue allows network-adjacent attackers to bypass the firewall on the Iris modem in affected Tesla Model S vehicles. The flaw exists within the firewall service due to a failure to obtain the xtables lock, enabling an attacker to bypass firewall rules. Authentication is not required to exploit this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

CVE-2024-6029

ZDI-25-260

Affected Products

Tesla Model S

References · 8

• https://osv.dev/vulnerability/CVE-2024-6029 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-25-260 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-6029 · Security Note
• https://t.me/cvedetector/24161 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1917758312004702649 · Twitter Post
• https://twitter.com/CVEnew/status/1917674562319233069 · Twitter Post
• https://t.me/cvetracker/22751 · Telegram Post
• https://twitter.com/TheZDIBugs/status/1917677421182030130 · Twitter Post