Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2024-6029
Analyzed
More InfoOfficial Page
Source-zdi-disclosures@trendmicro.com
View Known Exploited Vulnerability (KEV) details
Published At-30 Apr, 2025 | 20:15
Updated At-12 Aug, 2025 | 15:12

Tesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass the firewall on the Iris modem in affected Tesla Model S vehicles. Authentication is not required to exploit this vulnerability. The specific flaw exists within the firewall service. The issue results from a failure to obtain the xtables lock. An attacker can leverage this vulnerability to bypass firewall rules. Was ZDI-CAN-23197.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary3.05.0MEDIUM
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CPE Matches

tesla
tesla
>>model_s_firmware>>Versions before 2024.2.3(exclusive)
cpe:2.3:o:tesla:model_s_firmware:*:*:*:*:*:*:*:*
tesla
tesla
>>model_s>>-
cpe:2.3:h:tesla:model_s:-:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-367Primaryzdi-disclosures@trendmicro.com
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://www.zerodayinitiative.com/advisories/ZDI-25-260/zdi-disclosures@trendmicro.com
Third Party Advisory
Change History
0Changes found

Details not found