CVE-2025-34251 describes an improper privilege management vulnerability (CWE-269) in Tesla's Telematics Control Unit firmware before version 2025.14. The vulnerability arises because the Android Debug Bridge daemon (adbd) runs as root and allows certain adb commands (push/pull/forward) despite a lockdown mechanism that disables adb shell. Since the device's USB port is externally accessible, an attacker with physical access can leverage adb to write arbitrary files to writable locations and overwrite kernel uevent_helper or /proc/sys/kernel/hotplug entries. This leads to execution of attacker-controlled scripts with root privileges, compromising the device's security. The CVSS 4.0 vector indicates the attack requires physical access (AV:P), low attack complexity, no privileges or user interaction, and results in high impact on confidentiality, integrity, availability, and security requirements.

An attacker with physical access to the Tesla TCU device can bypass authentication controls and execute arbitrary code with root privileges by exploiting adb functionality. This can lead to full compromise of the device, including unauthorized code execution at the kernel level. The vulnerability affects confidentiality, integrity, availability, and security controls of the affected system. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, physical access to the USB port of the Tesla TCU should be strictly controlled to prevent exploitation. Monitoring for firmware updates from Tesla and applying them promptly when released is recommended.