CVE-2023-0864 : Cleartext Transmission of Sensitive Information vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (

Cleartext Transmission of Sensitive Information vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (CE) (Terra AC MID), ABB Terra AC wallbox (CE) Terra AC Juno CE, ABB Terra AC wallbox (CE) Terra AC PTB, ABB Terra AC wallbox (CE) Symbiosis, ABB Terra AC wallbox (JP).This issue affects Terra AC wallbox (UL40/80A): from 1.0;0 through 1.5.5; Terra AC wallbox (UL32A) : from 1.0;0 through 1.6.5; Terra AC wallbox (CE) (Terra AC MID): from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC Juno CE: from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC PTB : from 1.0;0 through 1.5.25; Terra AC wallbox (CE) Symbiosis: from 1.0;0 through 1.2.7; Terra AC wallbox (JP): from 1.0;0 through 1.6.5.

Published 2023-05-17 08:15:09

Updated 2023-05-26 02:23:55

Source Asea Brown Boveri Ltd. (ABB)

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2023-0864

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 11 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-0864

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.1	HIGH	CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H	1.2	5.9	Asea Brown Boveri Ltd. (ABB)
Attack Vector: Adjacent Network Attack Complexity: High Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High
4.3	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	2.8	1.4	NIST
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None

CWE ids for CVE-2023-0864

CWE-319 Cleartext Transmission of Sensitive Information

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

Assigned by:

cybersecurity@ch.abb.com (Secondary)
nvd@nist.gov (Primary)

Products affected by CVE-2023-0864

ABB » Terra Ac Wallbox Ul40 Firmware
Versions from including (>=) 1.0.0 and before (<) 1.5.6
cpe:2.3:o:abb:terra_ac_wallbox_ul40_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Terra Ac Wallbox Ul40 » Version: N/A
ABB » Terra Ac Wallbox 80a Firmware
Versions from including (>=) 1.0.0 and before (<) 1.5.6
cpe:2.3:o:abb:terra_ac_wallbox_80a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Terra Ac Wallbox 80a » Version: N/A
ABB » Terra Ac Wallbox Ul32a Firmware
Versions from including (>=) 1.0.0 and before (<) 1.6.6
cpe:2.3:o:abb:terra_ac_wallbox_ul32a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Terra Ac Wallbox Ul32a » Version: N/A
ABB » Terra Ac Wallbox Jp Firmware
Versions from including (>=) 1.0.0 and before (<) 1.6.6
cpe:2.3:o:abb:terra_ac_wallbox_jp_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Terra Ac Wallbox Jp » Version: N/A
ABB » Terra Ac Wallbox Ce Mid Firmware
Versions from including (>=) 1.0.0 and before (<) 1.6.6
cpe:2.3:o:abb:terra_ac_wallbox_ce_mid_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Terra Ac Wallbox Ce Mid » Version: N/A
ABB » Terra Ac Wallbox Ce Juno Firmware
Versions from including (>=) 1.0.0 and before (<) 1.6.6
cpe:2.3:o:abb:terra_ac_wallbox_ce_juno_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Terra Ac Wallbox Ce Juno » Version: N/A
ABB » Terra Ac Wallbox Ce Ptb Firmware
Versions from including (>=) 1.0.0 and before (<) 1.5.26
cpe:2.3:o:abb:terra_ac_wallbox_ce_ptb_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Terra Ac Wallbox Ce Ptb » Version: N/A
ABB » Terra Ac Wallbox Ce Symbiosis Firmware
Versions from including (>=) 1.0.0 and before (<) 1.2.8
cpe:2.3:o:abb:terra_ac_wallbox_ce_symbiosis_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Terra Ac Wallbox Ce Symbiosis » Version: N/A

Vulnerability Details : CVE-2023-0864

Exploit prediction scoring system (EPSS) score for CVE-2023-0864

CVSS scores for CVE-2023-0864

CWE ids for CVE-2023-0864

References for CVE-2023-0864

Products affected by CVE-2023-0864