PT-2023-3091 · Abb · Abb Terra Ac Wallbox

Published

2023-05-17

·

Updated

2023-05-26

·

CVE-2023-0864

CVSS v3.1

7.1

High

VectorAV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions ABB Terra AC wallbox (UL40/80A) versions 1.0;0 through 1.5.5 ABB Terra AC wallbox (UL32A) versions 1.0;0 through 1.6.5 ABB Terra AC wallbox (CE) (Terra AC MID) versions 1.0;0 through 1.6.5 ABB Terra AC wallbox (CE) Terra AC Juno CE versions 1.0;0 through 1.6.5 ABB Terra AC wallbox (CE) Terra AC PTB versions 1.0;0 through 1.5.25 ABB Terra AC wallbox (CE) Symbiosis versions 1.0;0 through 1.2.7 ABB Terra AC wallbox (JP) versions 1.0;0 through 1.6.5
Description The issue is related to the cleartext transmission of sensitive information in ABB Terra AC wallbox devices. This allows a remote attacker to gain access to configuration data using a specially crafted message.
Recommendations For ABB Terra AC wallbox (UL40/80A) versions 1.0;0 through 1.5.5, update to a version later than 1.5.5. For ABB Terra AC wallbox (UL32A) versions 1.0;0 through 1.6.5, update to a version later than 1.6.5. For ABB Terra AC wallbox (CE) (Terra AC MID) versions 1.0;0 through 1.6.5, update to a version later than 1.6.5. For ABB Terra AC wallbox (CE) Terra AC Juno CE versions 1.0;0 through 1.6.5, update to a version later than 1.6.5. For ABB Terra AC wallbox (CE) Terra AC PTB versions 1.0;0 through 1.5.25, update to a version later than 1.5.25. For ABB Terra AC wallbox (CE) Symbiosis versions 1.0;0 through 1.2.7, update to a version later than 1.2.7. For ABB Terra AC wallbox (JP) versions 1.0;0 through 1.6.5, update to a version later than 1.6.5.

Fix

Cleartext Transmission of Sensitive Information

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-319

Related Identifiers

BDU:2023-03180
CVE-2023-0864

Affected Products

Abb Terra Ac Wallbox