Tesla Model 3 Remote Start Control Vulnerability via Physical CAN Bus Access

Vulnerability

A vulnerability exists in Tesla Model 3 vehicles running software versions from 2023.Xx prior to 2023.44. Securing externally available CAN wires can allow physical access to the CAN bus. This access could be exploited to inject specially crafted CAN messages that control the vehicle's remote start functions.

Impact

Exploitation of this vulnerability could lead to unauthorized control of the vehicle's remote start functions.

Added: Sep 4, 2025, 3:31 PM
Updated: Sep 4, 2025, 3:38 PM

Vulnerability Rating

Custom Algorithm
spread
6.6
impact
0.6
exploitability
3.3
remediation
0.0
relevance
0.4
threat
0.0
urgency
5.7
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.