Introduction
Remote attackers can gain code execution on Tesla Wall Connector devices by exploiting a flaw in how the device parses HTTP Content-Length headers. The Wall Connector is a widely deployed electric vehicle charger, so unpatched units could expose the home and business networks they are connected to.
About Tesla Wall Connector: Tesla is a global leader in electric vehicles and energy products, and millions of Wall Connector units are installed in homes and businesses worldwide. The Wall Connector is a critical part of Tesla's charging infrastructure in both residential and commercial settings. Because so many units are installed and connected to a network, the device is a high-value target for attackers who want access to internal networks or want to disrupt EV charging.
Technical Information
CVE-2025-8320 is a remote code execution vulnerability in Tesla Wall Connector devices. The root cause is improper validation of the HTTP Content-Length header during HTTP request parsing. The firmware does not correctly bounds-check the Content-Length value, so an attacker who manipulates it can make the device access memory beyond the allocated buffer. In this classic buffer overflow, a network-adjacent attacker sends a crafted HTTP request that corrupts memory and ultimately leads to arbitrary code execution in the device's firmware context.
Exploitation requires no authentication. The vulnerable service usually listens on TCP port 80 or 34578, depending on device configuration. The vulnerability is classified under CWE-1284 (Improper Validation of Specified Quantity in Input). No public code snippets or proof of concept have been released for this issue.
Patch Information
Tesla fixed this critical vulnerability, identified as ZDI-25-711, in Wall Connector Firmware Version 24.44.3. The update corrects the Content-Length validation that could let attackers execute arbitrary code remotely. Users are strongly advised to update their devices to this firmware to protect them against potential exploits.
Patch source: https://www.zerodayinitiative.com/advisories/ZDI-25-711/
Affected Systems and Versions
- Tesla Wall Connector Gen 3 devices running firmware versions prior to 24.44.3 are affected.
- The vulnerability is present in every configuration that exposes the HTTP service on TCP port 80 or 34578.
- Only devices running firmware version 24.44.3 or later are protected.
Vendor Security History
Tesla has fixed earlier vulnerabilities in its products, including CVE-2025-2082 in the Tesla Model 3. The company usually responds to reported vulnerabilities with prompt over-the-air firmware updates. Tesla participates in bug bounty programs and has a track record of releasing fixes for critical issues within weeks of disclosure.
