CVE-2023-0863

HIGH

ABB Terra AC Wallbox Firmware - Improper Authentication

Title source: llm

Description

Improper Authentication vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (CE) (Terra AC MID), ABB Terra AC wallbox (CE) Terra AC Juno CE, ABB Terra AC wallbox (CE) Terra AC PTB, ABB Terra AC wallbox (CE) Symbiosis, ABB Terra AC wallbox (JP).This issue affects Terra AC wallbox (UL40/80A): from 1.0;0 through 1.5.5; Terra AC wallbox (UL32A) : from 1.0;0 through 1.6.5; Terra AC wallbox (CE) (Terra AC MID): from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC Juno CE: from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC PTB : from 1.0;0 through 1.5.25; Terra AC wallbox (CE) Symbiosis: from 1.0;0 through 1.2.7; Terra AC wallbox (JP): from 1.0;0 through 1.6.5.

References (1)

Core 1

Core References

Vendor Advisory

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108468A1415&LanguageCode=en&DocumentPartId=&Action=Launch

Scores

CVSS v3 8.8

EPSS 0.0011

EPSS Percentile 29.2%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-287

Status published

Products (8)

abb/terra_ac_wallbox_80a_firmware 1.0.0 - 1.5.6

abb/terra_ac_wallbox_ce_juno_firmware 1.0.0 - 1.6.6

abb/terra_ac_wallbox_ce_mid_firmware 1.0.0 - 1.6.6

abb/terra_ac_wallbox_ce_ptb_firmware 1.0.0 - 1.5.26

abb/terra_ac_wallbox_ce_symbiosis_firmware 1.0.0 - 1.2.8

abb/terra_ac_wallbox_jp_firmware 1.0.0 - 1.6.6

abb/terra_ac_wallbox_ul32a_firmware 1.0.0 - 1.6.6

abb/terra_ac_wallbox_ul40_firmware 1.0.0 - 1.5.6

Published May 17, 2023

Tracked Since Feb 18, 2026