8.8

CVE-2023-0863

Authentication to access the AC wallbox via its Bluetooth Low Energy (BLE) channel can be bypassed, 

Improper Authentication vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (CE) (Terra AC MID), ABB Terra AC wallbox (CE) Terra AC Juno CE, ABB Terra AC wallbox (CE) Terra AC PTB, ABB Terra AC wallbox (CE) Symbiosis, ABB Terra AC wallbox (JP).This issue affects Terra AC wallbox (UL40/80A): from 1.0;0 through 1.5.5; Terra AC wallbox (UL32A) : from 1.0;0 through 1.6.5; Terra AC wallbox (CE) (Terra AC MID): from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC Juno CE: from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC PTB : from 1.0;0 through 1.5.25; Terra AC wallbox (CE) Symbiosis: from 1.0;0 through 1.2.7; Terra AC wallbox (JP): from 1.0;0 through 1.6.5.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Abb ≫ Terra Ac Wallbox Ul40 Firmware Version >= 1.0.0 < 1.5.6
   Abb ≫ Terra Ac Wallbox Ul40 Version -
Abb ≫ Terra Ac Wallbox 80a Firmware Version >= 1.0.0 < 1.5.6
   Abb ≫ Terra Ac Wallbox 80a Version -
Abb ≫ Terra Ac Wallbox Ul32a Firmware Version >= 1.0.0 < 1.6.6
   Abb ≫ Terra Ac Wallbox Ul32a Version -
Abb ≫ Terra Ac Wallbox Jp Firmware Version >= 1.0.0 < 1.6.6
   Abb ≫ Terra Ac Wallbox Jp Version -
Abb ≫ Terra Ac Wallbox Ce Mid Firmware Version >= 1.0.0 < 1.6.6
   Abb ≫ Terra Ac Wallbox Ce Mid Version -
Abb ≫ Terra Ac Wallbox Ce Juno Firmware Version >= 1.0.0 < 1.6.6
   Abb ≫ Terra Ac Wallbox Ce Juno Version -
Abb ≫ Terra Ac Wallbox Ce Ptb Firmware Version >= 1.0.0 < 1.5.26
   Abb ≫ Terra Ac Wallbox Ce Ptb Version -
Abb ≫ Terra Ac Wallbox Ce Symbiosis Firmware Version >= 1.0.0 < 1.2.8
   Abb ≫ Terra Ac Wallbox Ce Symbiosis Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.35% 0.264
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cybersecurity@ch.abb.com 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108468A1415&LanguageCode=en&DocumentPartId=&Action=Launch
Vendor Advisory