← Back

CVE-2024-6030

nvd nist
Published: Apr 30, 2025Modified: Jun 17, 2026

JSON object

Loading...
7.0
Vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.0 / Impact: 5.9
Source: zdi-disclosures@trendmicro.com (Secondary)

Description

Tesla Model S oFono Unnecessary Privileges Sandbox Escape Vulnerability. This vulnerability allows local attackers to escape the sandbox on affected Tesla Model S vehicles. An attacker must first obtain the ability to execute code within the sandbox on the target system in order to exploit this vulnerability. The specific flaw exists within the oFono process. The process allows an attacker to modify interfaces. An attacker can leverage this vulnerability to bypass the iptables network sandbox. Was ZDI-CAN-23200.

Affected (1)

Tesla
1 product
Model S Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Model S Firmware
Before 2024.8
Running on/withPlatform Versions
Tesla
Model S
All versions

Related CWEs

CWE-250
Execution with Unnecessary Privileges
The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.

References (1)

Source: zdi-disclosures@trendmicro.com
Third Party Advisory

Timeline

No history available yet.