Tesla BLE Phone-as-a-Key Passive Entry Vulnerable to Relay Attacks-- Tesla对蓝牙低功耗手机作为钥匙被动进入的中继攻击脆弱

理心炼丹

已于 2022-06-08 15:52:16 修改

阅读量254

点赞数

分类专栏：安全文章标签：汽车安全

于 2022-06-08 15:40:02 首次发布

本文为博主原创文章，未经博主允许不得转载。

本文链接：https://blog.csdn.net/hymn1993/article/details/125185762

版权

安全专栏收录该内容

4 篇文章 0 订阅

订阅专栏

发布时间：2022年5月15日

Vendor: Tesla, Inc.

Vendor URL: https://www.tesla.com Versions affected: Attack tested with vehicle software v11.0 (2022.8.2 383989fadeea) and iOS app 4.6.1-891 (3784ebe63).

Systems Affected: Attack tested on Model 3. Model Y is likely also affected.

Author: Sultan Qasim Khan <sultan.qasimkhan[at]nccgroup[dot]com>

Risk: <6.8 CVSS v3.1 AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N> An attacker within Bluetooth signal range of a mobile device configured for Phone-as-a-Key use can conduct a relay attack to unlock and operate a vehicle despite the authorized mobile device being out of range of the vehicle.

BLE：蓝牙低功耗，Bluetooth Low Energy

参考：

https://www.bleepingcomputer.com/news/security/hackers-can-steal-your-tesla-model-3-y-using-new-bluetooth-attack/
Technical Advisory – Tesla BLE Phone-as-a-Key Passive Entry Vulnerable to Relay Attacks – NCC Group Research
https://teslamotorsclub.com/tmc/threads/how-secure-are-teslas.262411/