Auth bypass in Abb Terra Ac Wallbox 80a
CVE-2023-0863
Improper Authentication vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (CE) (Terra AC MID), ABB Terra AC wallbox (CE) Terra AC Juno CE, ABB Terra AC wallbox (CE) Terra AC PTB, ABB Terra AC wallbox (CE) Symbiosis, ABB Terra AC wallbox (JP).This issue affects Terra AC wallbox (UL40/80A): from 1.0;0 through 1.5.5; Terra AC wallbox (UL32A) : from 1.0;0 through 1.6.5; Terra AC wallbox (CE) (Terra AC MID): from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC Juno CE: from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC PTB : from 1.0;0 through 1.5.25; Terra AC wallbox (CE) Symbiosis: from 1.0;0 through 1.2.7; Terra AC wallbox (JP): from 1.0;0 through 1.6.5.
Vulnerability class: Broken Authentication
EPSS: 0.003 (27.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Abb Terra_ac_wallbox_80a
- Abb Terra_ac_wallbox_80a_firmware
- Abb Terra_ac_wallbox_ce_juno
- Abb Terra_ac_wallbox_ce_juno_firmware
- Abb Terra_ac_wallbox_ce_mid
- Abb Terra_ac_wallbox_ce_mid_firmware
- Abb Terra_ac_wallbox_ce_ptb
- Abb Terra_ac_wallbox_ce_ptb_firmware
- Abb Terra Ac Wallbox (Ce) Symbiosis — versions 1.0;0
- Abb Terra_ac_wallbox_ce_symbiosis
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cybersecurity@ch.abb.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2023-0863?
- CVE-2023-0863 is a high-severity vulnerability in Abb Terra Ac Wallbox 80a, classified under Improper Authentication. CVSS score: 8.8/10. Published 2023-05-17.
- How severe is CVE-2023-0863?
- High severity. CVSS v3 base score is 8.8 out of 10.
- Is CVE-2023-0863 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.