CVE-2024-6030
Tesla Model S oFono Unnecessary Privileges Sandbox Escape Vulnerability
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Tesla Model S oFono Unnecessary Privileges Sandbox Escape Vulnerability
Tesla Model S oFono Unnecessary Privileges Sandbox Escape Vulnerability. This vulnerability allows local attackers to escape the sandbox on affected Tesla Model S vehicles. An attacker must first obtain the ability to execute code within the sandbox on the target system in order to exploit this vulnerability. The specific flaw exists within the oFono process. The process allows an attacker to modify interfaces. An attacker can leverage this vulnerability to bypass the iptables network sandbox. Was ZDI-CAN-23200.
Reserved 2024-06-14 | Published 2025-04-30 | Updated 2025-04-30 | Assigner zdiCWE-250: Execution with Unnecessary Privileges
www.zerodayinitiative.com/advisories/ZDI-25-263/ (ZDI-25-263)
Support options
