Vulnerability Database

309,540

Total vulnerabilities in the database

CVE-2022-37709

Tesla Model 3 V11.0(2022.4.5.1 6b701552d7a6) Tesla mobile app v4.23 is vulnerable to Authentication Bypass by spoofing. Tesla Model 3's Phone Key authentication is vulnerable to Man-in-the-middle attacks in the BLE channel. It allows attackers to open a door and drive the car away by leveraging access to a legitimate Phone Key.

  • Published: Sep 16, 2022
  • Updated: Nov 16, 2025
  • CVE: CVE-2022-37709
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.3
  • AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CWEs:

Software From Fixed in
tesla / model_3_firmware 11.0 11.0.x
tesla / tesla 4.23 4.23.x