CVE-2020-15912

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2020-15912
Tesla Model 3 vehicles allow attackers to open a door by leveraging access to a legitimate key card, and then using NFC Relay. NOTE: the vendor has developed Pin2Drive to mitigate this issue

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

3.3 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:A/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 6.5 / Impact : 2.9

Access Vector ADJACENT_NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
https://cansecwest.com/post/2020-03-09-22:00:00_2020_Speakers Third Party Advisory
https://twitter.com/Kevin2600/status/1218892338182836224 Third Party Advisory
https://www.carhackingvillage.com/speaker-bios#htm3nrr Broken Link
https://www.youtube.com/watch?v=VYKsfgox-bs Third Party Advisory
https://www.youtube.com/watch?v=kQWg-Ywv3S4 Third Party Advisory
https://www.youtube.com/watch?v=nn-_3AbtEkI Exploit Third Party Advisory
https://cansecwest.com/post/2020-03-09-22:00:00_2020_Speakers Third Party Advisory
https://twitter.com/Kevin2600/status/1218892338182836224 Third Party Advisory
https://www.carhackingvillage.com/speaker-bios#htm3nrr Broken Link
https://www.youtube.com/watch?v=VYKsfgox-bs Third Party Advisory
https://www.youtube.com/watch?v=kQWg-Ywv3S4 Third Party Advisory
https://www.youtube.com/watch?v=nn-_3AbtEkI Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:tesla:model_3_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tesla:model_3:-:*:*:*:*:*:*:*
History

21 Nov 2024, 05:06

Type Values Removed Values Added
References () https://cansecwest.com/post/2020-03-09-22:00:00_2020_Speakers - Third Party Advisory () https://cansecwest.com/post/2020-03-09-22:00:00_2020_Speakers - Third Party Advisory
References () https://twitter.com/Kevin2600/status/1218892338182836224 - Third Party Advisory () https://twitter.com/Kevin2600/status/1218892338182836224 - Third Party Advisory
References () https://www.carhackingvillage.com/speaker-bios#htm3nrr - Broken Link () https://www.carhackingvillage.com/speaker-bios#htm3nrr - Broken Link
References () https://www.youtube.com/watch?v=VYKsfgox-bs - Third Party Advisory () https://www.youtube.com/watch?v=VYKsfgox-bs - Third Party Advisory
References () https://www.youtube.com/watch?v=kQWg-Ywv3S4 - Third Party Advisory () https://www.youtube.com/watch?v=kQWg-Ywv3S4 - Third Party Advisory
References () https://www.youtube.com/watch?v=nn-_3AbtEkI - Exploit, Third Party Advisory () https://www.youtube.com/watch?v=nn-_3AbtEkI - Exploit, Third Party Advisory

07 Nov 2023, 03:17

Type Values Removed Values Added
Summary ** DISPUTED ** Tesla Model 3 vehicles allow attackers to open a door by leveraging access to a legitimate key card, and then using NFC Relay. NOTE: the vendor has developed Pin2Drive to mitigate this issue. Tesla Model 3 vehicles allow attackers to open a door by leveraging access to a legitimate key card, and then using NFC Relay. NOTE: the vendor has developed Pin2Drive to mitigate this issue
Information

Published : 2020-07-23 15:15

Updated : 2024-11-21 05:06

NVD link : CVE-2020-15912

Mitre link : CVE-2020-15912

CVE.ORG link : CVE-2020-15912

JSON object : View

Products Affected

tesla

  • model_3
  • model_3_firmware
CWE
NVD-CWE-noinfo