CVE-2023-0863

Authentication to access the AC wallbox via its Bluetooth Low Energy (BLE) channel can be bypassed,

State: Published
Severity: 8.8 High
Published: May 17, 2023
Updated: Jan 22, 2025
Reserved: Feb 16, 2023

Description

Improper Authentication vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (CE) (Terra AC MID), ABB Terra AC wallbox (CE) Terra AC Juno CE, ABB Terra AC wallbox (CE) Terra AC PTB, ABB Terra AC wallbox (CE) Symbiosis, ABB Terra AC wallbox (JP).This issue affects Terra AC wallbox (UL40/80A): from 1.0;0 through 1.5.5; Terra AC wallbox (UL32A) : from 1.0;0 through 1.6.5; Terra AC wallbox (CE) (Terra AC MID): from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC Juno CE: from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC PTB : from 1.0;0 through 1.5.25; Terra AC wallbox (CE) Symbiosis: from 1.0;0 through 1.2.7; Terra AC wallbox (JP): from 1.0;0 through 1.6.5.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	ABB

Weaknesses

CWE-287 Improper Authentication

Affected Products

Product	Versions
Terra AC wallbox (UL40/80A)ABB	1.0;0 through 1.5.5Affected
Terra AC wallbox (UL32A)ABB	1.0;0 through 1.6.5Affected
Terra AC wallbox (CE) (Terra AC MID)ABB	1.0;0 through 1.6.5Affected
Terra AC wallbox (CE) Terra AC Juno CEABB	1.0;0 through 1.6.5Affected
Terra AC wallbox (CE) Terra AC PTBABB	1.0;0 through 1.5.25Affected
Terra AC wallbox (CE) SymbiosisABB	1.0;0 through 1.2.7Affected
Terra AC wallbox (JP)ABB	1.0;0 through 1.6.5Affected

References

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108468A1415&LanguageCode=en&DocumentPartId=&Action=Launch

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.