CVE-2016-9337: Tesla Gateway Ecu

Medium severity, CVSS 6.8. EPSS: 1.7% chance of exploitation in the next 30 days.

An issue was discovered in Tesla Motors Model S automobile, all firmware versions before version 7.1 (2.36.31) with web browser functionality enabled. The vehicle's Gateway ECU is susceptible to commands that may allow an attacker to install malicious software allowing the attacker to send messages to the vehicle's CAN bus, a Command Injection.

Affected products

• Tesla Gateway Ecu: affected versions not specified

Published 2017-02-13. Last modified 2026-06-17.