Tesla Wall Connector Content-Length Header Improper Input Validation Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Tesla Wall Connector devices. This issue arises from improper validation of user-supplied data in the HTTP Content-Length header, allowing network-adjacent attackers to execute arbitrary code on the affected devices. The vulnerability does not require authentication to exploit.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected Tesla Wall Connector devices, with the executed code running in the context of the device.

Remediation

This vulnerability has been fixed in Tesla Wall Connector Firmware Version 24.44.3.