CVE-2025-2082
HIGHTesla Model 3 Firmware < 2024.14 - Unauthenticated Remote Code Execution via VCSEC Integer Overflow
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2025-2082. PoCs published by Burak1320demiroz, shirabo.
AI-analyzed exploit summary This repository contains an interactive educational scenario based on CVE-2025-2082, describing a theoretical attack on Tesla Model 3 via TPMS protocol exploitation leading to CAN bus control. It is purely a simulation with no functional exploit code.
Description
Tesla Model 3 VCSEC Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 vehicles. Authentication is not required to exploit this vulnerability. The specific flaw exists within the VCSEC module. By manipulating the certificate response sent from the Tire Pressure Monitoring System (TPMS), an attacker can trigger an integer overflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the VCSEC module and send arbitrary messages to the vehicle CAN bus. Was ZDI-CAN-23800.
Exploits (2)
This repository contains an interactive educational scenario based on CVE-2025-2082, describing a theoretical attack on Tesla Model 3 via TPMS protocol exploitation leading to CAN bus control. It is purely a simulation with no functional exploit code.
This PoC demonstrates a function pointer overwrite vulnerability in Tesla's VCSEC component via a signed-to-unsigned integer conversion bug, leading to arbitrary code execution. It exploits a `memcpy()` operation with a negative `startIndex` to corrupt memory and hijack a function pointer.
References (1)
Scores
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H