Tesla Model S Iris Modem QCMAP Connection Manager Improper Input Validation Sandbox Escape Vulnerability

A sandbox escape vulnerability has been identified in the QCMAP_ConnectionManager component of the Tesla Model S Iris Modem. This vulnerability allows local attackers to escape the sandbox environment on affected vehicles. To exploit this vulnerability, an attacker must first gain the ability to execute low-privileged code on the target system. Once this is achieved, the vulnerability can be leveraged to assign LAN addresses to the WWAN, potentially allowing access to network services intended only for the internal LAN.

Impact

Exploitation of this vulnerability could lead to unauthorized access to internal network services by escaping the sandbox environment and manipulating network address assignments.

Remediation

This vulnerability has been fixed in Tesla Firmware Version 2024.8.