CVE-2024-6029
NONE EPSS 7.0%
Published Apr 30, 20251y ago · Modified Jun 17, 20261w ago
Published Apr 30, 2025 1y ago
Last Modified Jun 17, 2026 1w ago
Description
Tesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass the firewall on the Iris modem in affected Tesla Model S vehicles. Authentication is not required to exploit this vulnerability. The specific flaw exists within the firewall service. The issue results from a failure to obtain the xtables lock. An attacker can leverage this vulnerability to bypass firewall rules. Was ZDI-CAN-23197.
Threat Intelligence
EPSS Exploit Probability
7.0% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-367
Affected Products 2
References 1
- zerodayinitiative.com https://www.zerodayinitiative.com/advisories/ZDI-25-260/
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.