← Back

CVE-2024-6029

nvd nist
Published: Apr 30, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.0
Vector
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Exploitability: 1.6 / Impact: 3.4
Source: zdi-disclosures@trendmicro.com (Secondary)

Description

Tesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass the firewall on the Iris modem in affected Tesla Model S vehicles. Authentication is not required to exploit this vulnerability. The specific flaw exists within the firewall service. The issue results from a failure to obtain the xtables lock. An attacker can leverage this vulnerability to bypass firewall rules. Was ZDI-CAN-23197.

Affected (1)

Tesla
1 product
Model S Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Model S Firmware
Before 2024.2.3
Running on/withPlatform Versions
Tesla
Model S
All versions

Related CWEs

CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition
The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the product to perform invalid actions when the resource is in an unexpected state.

References (1)

Source: zdi-disclosures@trendmicro.com
Third Party Advisory

Timeline

No history available yet.