CVE-2025-8321: Tesla Wall Connector Firmware Downgrade Vulnerability
CVE-2025-8321 is a medium-severity flaw (CVSS 6.8) affecting wall connector firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Tesla Wall Connector Firmware Downgrade Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Tesla Wall Connector devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the firmware upgrade feature. The issue results from the lack of an anti-downgrade mechanism. An attacker can leverage this in conjunction with other vulnerabil
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 6.8 (Medium) |
| Attack vector | Physical |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.4% (top 65%) |
| CISA exploited list | No |
| Weakness | CWE-1328 |
| Published | 2025-07-30 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2025-8321?
wall connector firmware: upgrade to 24.44.3. Exact commands for each OS are on this page.
Is CVE-2025-8321 being exploited?
CVE-2025-8321 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2025-8321 affect?
CVE-2025-8321 affects wall connector firmware. Severity is medium (CVSS 6.8). Tesla Wall Connector Firmware Downgrade Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Tesla Wall Connector devices. Authentication is not required to exploit thi
How urgent is CVE-2025-8321?
Priority 32/100. No elevated risk signals yet.
Software pages
Tesla and automotive vulnerabilities
Related CVEs
- CVE-2025-8320 HIGH 8.8 UPGRADE Tesla Wall Connector Content-Length Header Improper Input Validation Remote Code Execution Vulnerability