PT-2023-3091 · Abb · Abb Terra Ac Wallbox

Publicado

2023-05-17

·

Atualizado

2023-05-26

·

CVE-2023-0864

CVSS v3.1

7.1

Alta

VetorAV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions ABB Terra AC wallbox (UL40/80A) versions 1.0;0 through 1.5.5 ABB Terra AC wallbox (UL32A) versions 1.0;0 through 1.6.5 ABB Terra AC wallbox (CE) (Terra AC MID) versions 1.0;0 through 1.6.5 ABB Terra AC wallbox (CE) Terra AC Juno CE versions 1.0;0 through 1.6.5 ABB Terra AC wallbox (CE) Terra AC PTB versions 1.0;0 through 1.5.25 ABB Terra AC wallbox (CE) Symbiosis versions 1.0;0 through 1.2.7 ABB Terra AC wallbox (JP) versions 1.0;0 through 1.6.5
Description The issue is related to the cleartext transmission of sensitive information in ABB Terra AC wallbox devices. This allows a remote attacker to gain access to configuration data using a specially crafted message.
Recommendations For ABB Terra AC wallbox (UL40/80A) versions 1.0;0 through 1.5.5, update to a version later than 1.5.5. For ABB Terra AC wallbox (UL32A) versions 1.0;0 through 1.6.5, update to a version later than 1.6.5. For ABB Terra AC wallbox (CE) (Terra AC MID) versions 1.0;0 through 1.6.5, update to a version later than 1.6.5. For ABB Terra AC wallbox (CE) Terra AC Juno CE versions 1.0;0 through 1.6.5, update to a version later than 1.6.5. For ABB Terra AC wallbox (CE) Terra AC PTB versions 1.0;0 through 1.5.25, update to a version later than 1.5.25. For ABB Terra AC wallbox (CE) Symbiosis versions 1.0;0 through 1.2.7, update to a version later than 1.2.7. For ABB Terra AC wallbox (JP) versions 1.0;0 through 1.6.5, update to a version later than 1.6.5.

Correção

Cleartext Transmission of Sensitive Information

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-319

Identificadores relacionados

BDU:2023-03180
CVE-2023-0864

Produtos afetados

Abb Terra Ac Wallbox