CVE-2020-10558

The driving interface of Tesla Model 3 vehicles in any release before 2020.4.10 allows Denial of Service to occur due to improper process separation, which allows attackers to disable the speedometer, web browser, climate controls, turn signal visual and sounds, navigation, autopilot notifications, along with other miscellaneous functions from the main screen.

Affected products

Tesla Model 3

Tesla Model 3 Web Interface

< 2020.4.10

Fix

Available

CVSS 2.0

7.1 HIGH

CVSS 3.1

6.5 MEDIUM

EPSS

2.6% (84th percentile)

NVD status

Modified

Published

2020-03-20