CVE-2020-29438: Tesla Model X Firmware

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Tesla Model X vehicles before 2020-11-23 have key fobs that accept firmware updates without signature verification. This allows attackers to construct firmware that retrieves an unlock code from a secure enclave chip.

Affected products

• Tesla Model X Firmware: before 2020-11-23 (fixed in 2020-11-23)

Published 2020-11-30. Last modified 2026-06-17.