CVE-2023-0864

High

Description

Cleartext Transmission of Sensitive Information vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (CE) (Terra AC MID), ABB Terra AC wallbox (CE) Terra AC Juno CE, ABB Terra AC wallbox (CE) Terra AC PTB, ABB Terra AC wallbox (CE) Symbiosis, ABB Terra AC wallbox (JP).This issue affects Terra AC wallbox (UL40/80A): from 1.0;0 through 1.5.5; Terra AC wallbox (UL32A) : from 1.0;0 through 1.6.5; Terra AC wallbox (CE) (Terra AC MID): from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC Juno CE: from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC PTB : from 1.0;0 through 1.5.25; Terra AC wallbox (CE) Symbiosis: from 1.0;0 through 1.2.7; Terra AC wallbox (JP): from 1.0;0 through 1.6.5.

SeverityHigh

CVSS7.1

Exploit probability—

ProductAbb Terra Ac Wallbox Ul40 Firmware

PublishedMay 17, 2023

First seenMay 17, 2023

Weakness typeCWE-319CWE-319

How to fix

Update

abb terra_ac_wallbox_ul40_firmware1.5.6 or later
abb terra_ac_wallbox_80a_firmware1.5.6 or later
abb terra_ac_wallbox_ul32a_firmware1.6.6 or later
abb terra_ac_wallbox_jp_firmware1.6.6 or later
abb terra_ac_wallbox_ce_mid_firmware1.6.6 or later
abb terra_ac_wallbox_ce_juno_firmware1.6.6 or later
abb terra_ac_wallbox_ce_ptb_firmware1.5.26 or later
abb terra_ac_wallbox_ce_symbiosis_firmware1.2.8 or later

Affected products

Product	Affected versions	Fixed in
abb terra_ac_wallbox_ul40_firmware	1.0.0 ≤ v < 1.5.6	1.5.6
abb terra_ac_wallbox_80a_firmware	1.0.0 ≤ v < 1.5.6	1.5.6
abb terra_ac_wallbox_ul32a_firmware	1.0.0 ≤ v < 1.6.6	1.6.6
abb terra_ac_wallbox_jp_firmware	1.0.0 ≤ v < 1.6.6	1.6.6
abb terra_ac_wallbox_ce_mid_firmware	1.0.0 ≤ v < 1.6.6	1.6.6
abb terra_ac_wallbox_ce_juno_firmware	1.0.0 ≤ v < 1.6.6	1.6.6
abb terra_ac_wallbox_ce_ptb_firmware	1.0.0 ≤ v < 1.5.26	1.5.26
abb terra_ac_wallbox_ce_symbiosis_firmware	1.0.0 ≤ v < 1.2.8	1.2.8

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.