CVSS 3.0
6.5 mediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NCVE-2018-16806
A Pektron Passive Keyless Entry and Start (PKES) system, as used on the Tesla Model S and possibly other vehicles, relies on the DST40 cipher, which makes it easier for attackers to obtain access via an approach involving a 5.4 TB precomputation, followed by wake-frame reception and two challenge/response operations, to clone a key fob within a few seconds.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
- CWE
- CWE-327
- Published
- Modified
- Record from
- the NVD, synced
Affected
- pektron:passive_keyless_entry_and_start_system_firmware