CVE-2025-5517mediumCWE-122

CVE-2025-5517: fallo de gravedad media en ABB Terra AC wallbox (UL40/80A)

Heap Memory Corruption Vulnerability

Publicada el

Seguir esta CVE+ Monitorear Terra AC wallbox+ Monitorear Terra AC wallbox Terra AC Juno CE

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.1epss 0.3%
Heap-based Buffer Overflow vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (MID/ CE) -Terra AC MID, ABB Terra AC wallbox (MID/ CE) -Terra AC Juno CE, ABB Terra AC wallbox (MID/ CE) -Terra AC PTB, ABB Terra AC wallbox (JP).This issue affects Terra AC wallbox (UL40/80A): through 1.8.32; Terra AC wallbox (UL32A): through 1.8.2; Terra AC wallbox (MID/ CE) -Terra AC MID: through 1.8.32; Terra AC wallbox (MID/ CE) -Terra AC Juno CE: through 1.8.32; Terra AC wallbox (MID/ CE) -Terra AC PTB: through 1.8.21; Terra AC wallbox (JP): through 1.8.2.
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
ABB · Terra AC wallbox (JP)ABB · Terra AC wallbox (MID/ CE) -Terra AC Juno CEABB · Terra AC wallbox (MID/ CE) -Terra AC MIDABB · Terra AC wallbox (MID/ CE) -Terra AC PTBABB · Terra AC wallbox (UL32A)ABB · Terra AC wallbox (UL40/80A)
CVEs relacionadas — ABB Terra AC wallbox (UL40/80A)

En el mismo producto, de las más peligrosas a las menos.

CVE-2023-0863HIGHAuthentication to access the AC wallbox via its Bluetooth Low Energy (BLE) channel can be bypassed, EPSS 0.3%CVE-2023-0864HIGHConfiguration data is exchanged in plaintext and could be available to a nearby attacker if present during configuration or usage of the device via Bluetooth Low Energy (BLE).EPSS 0.2%