CVE-2022-27948 : Certain Tesla vehicles through 2022-03-26 allow attackers to open the charging p

Certain Tesla vehicles through 2022-03-26 allow attackers to open the charging port via a 315 MHz RF signal containing a fixed sequence of approximately one hundred symbols. NOTE: the vendor's perspective is that the behavior is as intended

Published 2022-03-27 13:15:14

Updated 2024-08-03 06:15:53

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2022-27948

Tesla » Model 3 Firmware
Versions up to, including, (<=) 2022-03-26
cpe:2.3:o:tesla:model_3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Tesla » Model 3 » Version: N/A
When used together with: Tesla » Model S » Version: N/A
When used together with: Tesla » Model X » Version: N/A
Tesla » Model X Firmware
Versions up to, including, (<=) 2022-03-26
cpe:2.3:o:tesla:model_x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Tesla » Model 3 » Version: N/A
When used together with: Tesla » Model S » Version: N/A
When used together with: Tesla » Model X » Version: N/A
Tesla » Model S Firmware
Versions up to, including, (<=) 2022-03-26
cpe:2.3:o:tesla:model_s_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Tesla » Model 3 » Version: N/A
When used together with: Tesla » Model S » Version: N/A
When used together with: Tesla » Model X » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2022-27948

EPSS FAQ

0.08%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 34 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-27948

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
3.3	LOW	AV:A/AC:L/Au:N/C:N/I:P/A:N	6.5	2.9	NIST
Access Vector: Adjacent Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None
7.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L	3.9	2.7	MITRE
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Changed Confidentiality: None Integrity: Low Availability: Low
4.3	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	2.8	1.4	NIST
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: Low Availability: None

CWE ids for CVE-2022-27948

CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Assigned by: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

References for CVE-2022-27948

https://twitter.com/IfNotPike/status/1507852693699661827

🍀NotPike🍀 on Twitter: "Doing a little post analyses on the message it appears to be ASK/OOK with a symbol rate ~2.5KHz at 315MHz. Preamble: 1010101010101010101010101 Raw Message: 1596659999969A5A95A
Exploit;Third Party Advisory
https://github.com/pompel123/Tesla-Charging-Port-Opener

GitHub - pompel123/Tesla-Charging-Port-Opener: Files for HackRF + Portapack MAYHEM firmware to open any and all Tesla vehicle charging ports in range!
Third Party Advisory
https://twitter.com/IfNotPike/status/1507818836568858631

🍀NotPike🍀 on Twitter: "TIL: Tesla's charging ports use a standard wireless message to open up on 315MHz... Which can be replyed! :D https://t.co/k2N1LR2xwN" / Twitter
Third Party Advisory

Jump to

Vulnerability Details : CVE-2022-27948

Products affected by CVE-2022-27948

Exploit prediction scoring system (EPSS) score for CVE-2022-27948

CVSS scores for CVE-2022-27948

CWE ids for CVE-2022-27948

References for CVE-2022-27948