8.8

CVE-2023-0863

Improper Authentication vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (CE) (Terra AC MID), ABB Terra AC wallbox (CE) Terra AC Juno CE, ABB Terra AC wallbox (CE) Terra AC PTB, ABB Terra AC wallbox (CE) Symbiosis, ABB Terra AC wallbox (JP).This issue affects Terra AC wallbox (UL40/80A): from 1.0;0 through 1.5.5; Terra AC wallbox (UL32A) : from 1.0;0 through 1.6.5; Terra AC wallbox (CE) (Terra AC MID): from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC Juno CE: from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC PTB : from 1.0;0 through 1.5.25; Terra AC wallbox (CE) Symbiosis: from 1.0;0 through 1.2.7; Terra AC wallbox (JP): from 1.0;0 through 1.6.5.

Data is provided by the National Vulnerability Database (NVD)
Abb ≫ Terra Ac Wallbox Ul40 Firmware Version >= 1.0.0 < 1.5.6
   Abb ≫ Terra Ac Wallbox Ul40 Version-
Abb ≫ Terra Ac Wallbox 80a Firmware Version >= 1.0.0 < 1.5.6
   Abb ≫ Terra Ac Wallbox 80a Version-
Abb ≫ Terra Ac Wallbox Ul32a Firmware Version >= 1.0.0 < 1.6.6
   Abb ≫ Terra Ac Wallbox Ul32a Version-
Abb ≫ Terra Ac Wallbox Jp Firmware Version >= 1.0.0 < 1.6.6
   Abb ≫ Terra Ac Wallbox Jp Version-
Abb ≫ Terra Ac Wallbox Ce Mid Firmware Version >= 1.0.0 < 1.6.6
   Abb ≫ Terra Ac Wallbox Ce Mid Version-
Abb ≫ Terra Ac Wallbox Ce Juno Firmware Version >= 1.0.0 < 1.6.6
   Abb ≫ Terra Ac Wallbox Ce Juno Version-
Abb ≫ Terra Ac Wallbox Ce Ptb Firmware Version >= 1.0.0 < 1.5.26
   Abb ≫ Terra Ac Wallbox Ce Ptb Version-
Abb ≫ Terra Ac Wallbox Ce Symbiosis Firmware Version >= 1.0.0 < 1.2.8
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.1% 0.273
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cybersecurity@ch.abb.com 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.