PT-2025-35942 · Tesla · Tesla Model 3

Netanel Saka + 1 · Published 2025-09-04 · Updated 2025-09-04 · CVE-2025-6785

Positive Technologies (AI Summary)

CVSS v4.0

4.7

Medium

Base vector

AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:A/V:D/RE:L/U:Amber

Name of the Vulnerable Software and Affected Versions Tesla Model 3 versions 2023.Xx through 2023.43

Description Securing externally available CAN wires can easily allow physical access to the CAN bus, potentially enabling the injection of specially formed CAN messages to control remote start functions of the vehicle.

Recommendations Update software to version 2023.44 or later.

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

CWE-1263

Related Identifiers

CVE-2025-6785

Affected Products

Tesla Model 3

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-6785 · Security Note
• https://asrg.io/security-advisories/cve-2025-6785 · Note
• https://twitter.com/CVEnew/status/1963617668453601742 · Twitter Post
• https://t.me/CVEtracker/31700 · Telegram Post