CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.6. See the original NVD description below for full technical details.
CVE
CVE-2020-29440
Severity
MEDIUM
CVSS
4.6
EPSS
0.21%
Original NVD Description
Tesla Model X vehicles before 2020-11-23 do not perform certificate validation during an attempt to pair a new key fob with the body control module (BCM). This allows an attacker (who is inside a vehicle, or is otherwise able to send data over the CAN bus) to start and drive the vehicle with a spoofed key fob.
Related CVEs
Other vulnerabilities affecting the same vendor(s)