CVE-2020-29440 | BDVDB-2026-145284 Detail

Description#

Tesla Model X vehicles before 2020-11-23 do not perform certificate validation during an attempt to pair a new key fob with the body control module (BCM). This allows an attacker (who is inside a vehicle, or is otherwise able to send data over the CAN bus) to start and drive the vehicle with a spoofed key fob.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.wired.com/story/tesla-model-x-hack-bluetooth/

Exploit#

No public exploit known

History#

Version 12020-11-30Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.