Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Tesla

First CVE: Feb 13, 2017Active for: 9 yearsTotal CVEs: 24
25.7
VTI Score
Low

Tesla's vulnerability profile centers on its vehicle platforms and firmware, spanning consumer electric vehicles such as the Model 3, Model S, and Model X, where the firmware layer and embedded systems present a distinct attack surface. The recurring weakness classes—including time-of-check time-of-use race conditions, heap-based buffer overflows, out-of-bounds writes, and authentication bypass through spoofing—reflect the complexity of real-time control systems, embedded firmware, and vehicle-to-infrastructure communication. A significant portion of disclosures carry placeholder or insufficient-information classifications in the NVD, a pattern consistent with coordinated automotive vulnerability disclosure where technical details may be withheld during remediation windows. Defenders should track Tesla advisories for firmware patch availability and prioritize deployment to fleet-connected vehicles, particularly where remote update mechanisms or wireless interfaces are in use; current severity, exploitation activity, and exposure counts are shown alongside this summary.

FAUCET AI Generated
24
Total CVEs
More Total CVEs than 97% of tracked vendors
0.2
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 2% of tracked vendors
6.9
Avg CVSS Score
Higher Avg CVSS Score than 49% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Tesla over time

Volume of CVEsAvg CVSS Base Score
First CVE
Feb 13, 2017
9 years ago
Most Recent CVE
Jul 30, 2025
359 days ago

Products(14 total)

Top CVEs

Signals from CVEs in this vendor scope (24 CVEs).

24 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2025-8320HIGH
Tesla Wall Connector Content-Length Header Improper Input Validation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary
Jul 30, 20258.830NONO
CVE-2023-32156HIGH
Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 v
May 3, 20248.828NONO
CVE-2020-9306HIGH
Tesla SolarCity Solar Monitoring Gateway through 5.46.43 has a "Use of Hard-coded Credentials" issue because Digi ConnectPort X2e uses a .pyc file to store the cleartext password f
Feb 18, 20218.826NONO
CVE-2025-2082HIGH
Tesla Model 3 VCSEC Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 v
Apr 30, 20257.525NONO
CVE-2022-42430HIGH
This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles. An attacker must first obtain the ability to execute privileged code on the target syst
Mar 29, 20237.825NONO
CVE-2024-13943HIGH
Tesla Model S Iris Modem QCMAP_ConnectionManager Improper Input Validation Sandbox Escape Vulnerability. This vulnerability allows local attackers to escape the sandbox on affected
Apr 30, 20257.824NONO
CVE-2022-42431HIGH
This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles. An attacker must first obtain the ability to execute privileged code on the target syst
Mar 29, 20237.824NONO
CVE-2024-6032HIGH
Tesla Model S Iris Modem ql_atfwd Command Injection Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected Tesla Model S vehi
Apr 30, 20257.823NONO
CVE-2024-6031HIGH
Tesla Model S oFono AT Command Heap-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected Tesla Model
Apr 30, 20257.823NONO
CVE-2019-9977HIGH
The renderer process in the entertainment system on Tesla Model 3 vehicles mishandles JIT compilation, which allows attackers to trigger firmware code execution, and display a craf
Mar 24, 20198.823NONO
View all 24 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products24 CVEs
46%
54%
Severity distribution among all CVEs352,294 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local7 (29.2%)
Network3 (12.5%)
Unknown0 (0.0%)
Physical4 (16.7%)
Adjacent Network10 (41.7%)
Attack Complexity
Low16 (66.7%)
High8 (33.3%)
Unknown0 (0.0%)
User Interaction
None21 (87.5%)
Unknown0 (0.0%)
Required3 (12.5%)
Privileges Required
Low7 (29.2%)
High0 (0.0%)
None17 (70.8%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (24 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Tesla.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Tesla — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Tesla's Products

View all 3 CNAs →

Top CWEs