ByteOS Network

NVD Vulnerability Details :

CVE-2023-32156

Analyzed

Source-zdi-disclosures@trendmicro.com

Published At-03 May, 2024 | 02:15

Updated At-13 Aug, 2025 | 12:44

Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to execute privileged code on the Tesla infotainment system in order to exploit this vulnerability. The specific flaw exists within the handling of firmware updates. The issue results from improper error-handling during the update process. An attacker can leverage this vulnerability to execute code in the context of Tesla's Gateway ECU. . Was ZDI-CAN-20734.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Secondary	3.0	9.0	CRITICAL	CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CPE Matches

tesla>>model_3_firmware>>2023.6

cpe:2.3:o:tesla:model_3_firmware:2023.6:*:*:*:*:*:*:*

tesla>>model_3>>-

cpe:2.3:h:tesla:model_3:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-367	Secondary	zdi-disclosures@trendmicro.com
NVD-CWE-noinfo	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.zerodayinitiative.com/advisories/ZDI-23-972/	zdi-disclosures@trendmicro.com	Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-23-972/	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History