Configuration data is exchanged in plaintext and could be available to a nearby attacker if present during configuration or usage of the device via Bluetooth Low Energy (BLE).

Summary

Cleartext Transmission of Sensitive Information vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (CE) (Terra AC MID), ABB Terra AC wallbox (CE) Terra AC Juno CE, ABB Terra AC wallbox (CE) Terra AC PTB, ABB Terra AC wallbox (CE) Symbiosis, ABB Terra AC wallbox (JP).This issue affects Terra AC wallbox (UL40/80A): from 1.0;0 through 1.5.5; Terra AC wallbox (UL32A) : from 1.0;0 through 1.6.5; Terra AC wallbox (CE) (Terra AC MID): from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC Juno CE: from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC PTB : from 1.0;0 through 1.5.25; Terra AC wallbox (CE) Symbiosis: from 1.0;0 through 1.2.7; Terra AC wallbox (JP): from 1.0;0 through 1.6.5.

Timeline

1. May 17, 2023, 7:15 AM UTCCVE published
2. Jan 22, 2025, 4:49 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: total

3. Jan 22, 2025, 4:50 PM UTCRecord last updated

Affected versions

• ABB Terra AC wallbox (UL40/80A)

  From 1.0;0 · through 1.5.5

• ABB Terra AC wallbox (UL32A)

  From 1.0;0 · through 1.6.5

• ABB Terra AC wallbox (CE) (Terra AC MID)

  From 1.0;0 · through 1.6.5

• ABB Terra AC wallbox (CE) Terra AC Juno CE

  From 1.0;0 · through 1.6.5

• ABB Terra AC wallbox (CE) Terra AC PTB

  From 1.0;0 · through 1.5.25

• ABB Terra AC wallbox (CE) Symbiosis

  From 1.0;0 · through 1.2.7

• ABB Terra AC wallbox (JP)

  From 1.0;0 · through 1.6.5

References 1