CVE-2025-34251

UNKNOWN 0.0

Tesla Telematics Control Unit (TCU) < v2025.14 Authentication Bypass

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Tesla Telematics Control Unit (TCU) firmware prior to v2025.14 contains an authentication bypass vulnerability. The TCU runs the Android Debug Bridge (adbd) as root and, despite a “lockdown” check that disables adb shell, still permits adb push/pull and adb forward. Because adbd is privileged and the device’s USB port is exposed externally, an attacker with physical access can write an arbitrary file to a writable location and then overwrite the kernel’s uevent_helper or /proc/sys/kernel/hotplug entries via ADB, causing the script to be executed with root privileges.

CWE	CWE-269 CWE-288
Vendor	tesla
Product	telematics control unit (tcu)
Published	Oct 6, 2025
Last Updated	Mar 23, 2026

Stay Ahead of the Next One

Get instant alerts for tesla telematics control unit (tcu)

Be the first to know when new unknown vulnerabilities affecting tesla telematics control unit (tcu) are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Tesla / Telematics Control Unit (TCU)

* < 2025.14

References

NVD ↗ CVE.org ↗ EPSS Data ↗

tesla.com: https://www.tesla.com/ nccgroup.com: https://www.nccgroup.com/research-blog/technical-advisory-tesla-telematics-control-unit-adb-auth-bypass/ vulncheck.com: https://www.vulncheck.com/advisories/tesla-tcu-auth-bypass

Credits

Alex Plaskett and McCaulay Hudson of NCC Group