Tesla Red Team

ZCC on Linux privilege escalation

Output encoding missing in redrurl parameter

A URL parameter during login flow was vulnerable to injection. An attacker could insert a malicious domain in this parameter, which would redirect the user after auth and send the authorization token to the redirected domain.

Linux ZCC allows unsigned updates, allowing elevated Code Execution