CVE-2025-6785 — Tesla Model 3 Physical CAN Bus Injection

CVE-2025-6785

Tesla Model 3 Physical CAN Bus Injection PUBLISHED

Description (CNA)

Securing externally available CAN wires can easily allow physical access to the CAN bus, allowing possible injection of specially formed CAN messages to control remote start functions of the vehicle. Testing completed on Tesla Model 3 vehicles with software version v11.1 (2023.20.9 ee6de92ddac5). This issue affects Model 3: With software versions from 2023.Xx before 2023.44.

Affected (CNA)

Vendor / product	Versions
Tesla / Model 3	affected 2023.xx before 2023.44

CWE

CWE-74, CWE-1263

References

https://asrg.io/security-advisories/cve-2025-6785/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.