Vulnerability Description
Securing externally available CAN wires can easily allow physical access to the CAN bus, allowing possible injection of specially formed CAN messages to control remote start functions of the vehicle. Testing completed on Tesla Model 3 vehicles with software version v11.1 (2023.20.9 ee6de92ddac5). This issue affects Model 3: With software versions from 2023.Xx before 2023.44.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2025-6785?
CVE-2025-6785 is a documented vulnerability. Securing externally available CAN wires can easily allow physical access to the CAN bus, allowing possible injection of specially formed CAN messages to control remote start functions of the vehicle. ...
How severe is CVE-2025-6785?
CVSS scoring is not yet available for CVE-2025-6785. Check NVD for updates.
Is there a patch for CVE-2025-6785?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.