CVE-2024-13943

Tesla Model S Iris Modem QCMAP_ConnectionManager Improper Input Validation Sandbox Escape Vulnerability. This vulnerability allows local attackers to escape the sandbox on affected affected Tesla Model S vehicles. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the QCMAP_ConnectionManager component. An attacker can abuse the service to assign LAN addresses to the WWAN. An attacker can leverage this vulnerability to access network services that were only intended to be exposed to the internal LAN. Was ZDI-CAN-23199.

• CWE-20

• https://www.zerodayinitiative.com/advisories/ZDI-25-262/Third Party Advisory

Published

Apr 30, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-13931Relative Path Traversal vulnerabilities in ASPECT allow acce…7.5
• CVE-2024-13933The FoodBakery | Delivery Restaurant Directory WordPress The…8.8
• CVE-2024-13939String::Compare::ConstantTime for Perl through 0.321 is vuln…7.5
• CVE-2024-1394A memory leak flaw was found in Golang in the RSA encrypting…7.5
• CVE-2024-13940The Ninja Forms Webhooks plugin for WordPress is vulnerable …5.5
• CVE-2024-13941A vulnerability was found in ouch-org ouch up to 0.3.1. It h…5.3
• CVE-2024-13944Link Following Local Privilege Escalation Vulnerability in N…7.8
• CVE-2024-13945Stored Absolute Path Traversal vulnerabilities in ASPECT cou…8.4
• CVE-2024-13946DLL's are not digitally signed when loaded in ASPECT's confi…7.1
• CVE-2024-13947Device commissioning parameters in ASPECT may be modified by…7.1
• CVE-2024-13948Windows permissions for ASPECT configuration toolsets are no…7.3
• CVE-2024-13949Large content vulnerabilities are present in ASPECT exposing…6.9