{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-8321", "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "state": "PUBLISHED", "assignerShortName": "zdi", "dateReserved": "2025-07-30T00:48:45.723Z", "datePublished": "2025-07-30T00:50:04.326Z", "dateUpdated": "2025-07-30T13:48:29.568Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "shortName": "zdi", "dateUpdated": "2025-07-30T00:50:04.326Z"}, "title": "Tesla Wall Connector Firmware Downgrade Vulnerability", "descriptions": [{"lang": "en", "value": "Tesla Wall Connector Firmware Downgrade Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Tesla Wall Connector devices. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the firmware upgrade feature. The issue results from the lack of an anti-downgrade mechanism. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the device. Was ZDI-CAN-26299."}], "affected": [{"vendor": "Tesla", "product": "Wall Connector", "versions": [{"version": "24.44.1", "status": "affected"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-1328", "description": "CWE-1328: Security Version Number Mutable to Older Versions", "type": "CWE"}]}], "references": [{"url": "https://www.zerodayinitiative.com/advisories/ZDI-25-712/", "name": "ZDI-25-712", "tags": ["x_research-advisory"]}], "dateAssigned": "2025-07-30T00:48:45.751Z", "datePublic": "2025-07-30T00:49:55.241Z", "source": {"lang": "en", "value": "Synacktiv"}, "metrics": [{"format": "CVSS", "cvssV3_0": {"version": "3.0", "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 6.8, "baseSeverity": "MEDIUM"}}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-07-30T13:47:20.207388Z", "id": "CVE-2025-8321", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-07-30T13:48:29.568Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-8321", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-07-30T13:47:20.207388Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-07-30T13:48:06.628Z"}}], "cna": {"title": "Tesla Wall Connector Firmware Downgrade Vulnerability", "source": {"lang": "en", "value": "Synacktiv"}, "metrics": [{"format": "CVSS", "cvssV3_0": {"version": "3.0", "baseScore": 6.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "Tesla", "product": "Wall Connector", "versions": [{"status": "affected", "version": "24.44.1"}], "defaultStatus": "unknown"}], "datePublic": "2025-07-30T00:49:55.241Z", "references": [{"url": "https://www.zerodayinitiative.com/advisories/ZDI-25-712/", "name": "ZDI-25-712", "tags": ["x_research-advisory"]}], "dateAssigned": "2025-07-30T00:48:45.751Z", "descriptions": [{"lang": "en", "value": "Tesla Wall Connector Firmware Downgrade Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Tesla Wall Connector devices. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the firmware upgrade feature. The issue results from the lack of an anti-downgrade mechanism. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the device. Was ZDI-CAN-26299."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1328", "description": "CWE-1328: Security Version Number Mutable to Older Versions"}]}], "providerMetadata": {"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "shortName": "zdi", "dateUpdated": "2025-07-30T00:50:04.326Z"}}}, "cveMetadata": {"cveId": "CVE-2025-8321", "state": "PUBLISHED", "dateUpdated": "2025-07-30T13:48:29.568Z", "dateReserved": "2025-07-30T00:48:45.723Z", "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "datePublished": "2025-07-30T00:50:04.326Z", "assignerShortName": "zdi"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tesla:wall_connector_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6EA3C822-7AC3-4E30-A843-9B8013295BBE", "versionEndExcluding": "24.44.3", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tesla:wall_connector:-:*:*:*:*:*:*:*", "matchCriteriaId": "583D4B2D-6F23-440F-A8AF-224AC9AEED54", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Tesla Wall Connector Firmware Downgrade Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Tesla Wall Connector devices. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the firmware upgrade feature. The issue results from the lack of an anti-downgrade mechanism. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the device. Was ZDI-CAN-26299."}, {"lang": "es", "value": "Vulnerabilidad de degradaci\u00f3n de Tesla Wall Connector Firmware. Esta vulnerabilidad permite a atacantes con presencia f\u00edsica ejecutar c\u00f3digo arbitrario en las instalaciones afectadas de los dispositivos Tesla Wall Connector. No se requiere autenticaci\u00f3n para explotar esta vulnerabilidad. La falla espec\u00edfica se encuentra en la funci\u00f3n de actualizaci\u00f3n de firmware. El problema se debe a la falta de un mecanismo anti-degradaci\u00f3n. Un atacante puede aprovechar esto, junto con otras vulnerabilidades, para ejecutar c\u00f3digo en el contexto del dispositivo. Era ZDI-CAN-26299."}], "id": "CVE-2025-8321", "lastModified": "2025-08-12T15:17:43.440", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "HIGH", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 0.9, "impactScore": 5.9, "source": "zdi-disclosures@trendmicro.com", "type": "Secondary"}]}, "published": "2025-07-30T01:15:26.233", "references": [{"source": "zdi-disclosures@trendmicro.com", "tags": ["Third Party Advisory"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-712/"}], "sourceIdentifier": "zdi-disclosures@trendmicro.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-1328"}], "source": "zdi-disclosures@trendmicro.com", "type": "Primary"}]}

{}