CVE-2025-6785

4.7 mediumEPSS 0.2%

Securing externally available CAN wires can easily allow physical access to the CAN bus, allowing possible injection of specially formed CAN messages to control remote start functions of the vehicle. Testing completed on Tesla Model 3 vehicles with software version v11.1 (2023.20.9 ee6de92ddac5). This issue affects Model 3: With software versions from 2023.Xx before 2023.44.

Severity

CVSS 4.0

4.7 medium

CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/S:N/AU:Y/R:A/V:D/RE:L/U:Amber

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
CWEs: CWE-74, CWE-1263
Published: 2025-09-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://asrg.io/security-advisories/cve-2025-6785/

Check your stack JSON