CVE-2020-29439: Tesla Model X Firmware

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Tesla Model X vehicles before 2020-11-23 have key fobs that rely on five VIN digits for the authentication needed for a body control module (BCM) to initiate a Bluetooth wake-up action. (The full VIN is visible from outside the vehicle.)

Affected products

• Tesla Model X Firmware: before 2020-11-23 (fixed in 2020-11-23)

Published 2020-11-30. Last modified 2026-06-17.