Lucene search

[email protected]CVE-2023-0864

HistoryMay 17, 2023 - 8:15 a.m.

CVE-2023-0864

2023-05-1708:15:08

CWE-319

[email protected]

web.nvd.nist.gov

cve-2023-0864

cleartext transmission

sensitive information

vulnerability

abb terra ac wallbox

7.1 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

4.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

Cleartext Transmission of Sensitive Information vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (CE) (Terra AC MID), ABB Terra AC wallbox (CE) Terra AC Juno CE, ABB Terra AC wallbox (CE) Terra AC PTB, ABB Terra AC wallbox (CE) Symbiosis, ABB Terra AC wallbox (JP).This issue affects Terra AC wallbox (UL40/80A): from 1.0;0 through 1.5.5; Terra AC wallbox (UL32A) : from 1.0;0 through 1.6.5; Terra AC wallbox (CE) (Terra AC MID): from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC Juno CE: from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC PTB : from 1.0;0 through 1.5.25; Terra AC wallbox (CE) Symbiosis: from 1.0;0 through 1.2.7; Terra AC wallbox (JP): from 1.0;0 through 1.6.5.

Affected configurations

NVD

Node

abbterra_ac_wallbox_ul40_firmwareRange1.0.0–1.5.6

AND

abbterra_ac_wallbox_ul40Match-

Node

abbterra_ac_wallbox_80a_firmwareRange1.0.0–1.5.6

AND

abbterra_ac_wallbox_80aMatch-

Node

abbterra_ac_wallbox_ul32a_firmwareRange1.0.0–1.6.6

AND

abbterra_ac_wallbox_ul32aMatch-

Node

abbterra_ac_wallbox_jp_firmwareRange1.0.0–1.6.6

AND

abbterra_ac_wallbox_jpMatch-

Node

abbterra_ac_wallbox_ce_mid_firmwareRange1.0.0–1.6.6

AND

abbterra_ac_wallbox_ce_midMatch-

Node

abbterra_ac_wallbox_ce_juno_firmwareRange1.0.0–1.6.6

AND

abbterra_ac_wallbox_ce_junoMatch-

Node

abbterra_ac_wallbox_ce_ptb_firmwareRange1.0.0–1.5.26

AND

abbterra_ac_wallbox_ce_ptbMatch-

Node

abbterra_ac_wallbox_ce_symbiosis_firmwareRange1.0.0–1.2.8

AND

abbterra_ac_wallbox_ce_symbiosisMatch-

CPENameOperatorVersion
abb:terra_ac_wallbox_ul40_firmwareabb terra ac wallbox ul40 firmwarelt1.5.6

CPE	Name	Operator	Version
abb:terra_ac_wallbox_ul40_firmware	abb terra ac wallbox ul40 firmware	lt	1.5.6

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Terra AC wallbox (UL40/80A)",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "1.5.5",
        "status": "affected",
        "version": "1.0;0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Terra AC wallbox (UL32A) ",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "1.6.5",
        "status": "affected",
        "version": "1.0;0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Terra AC wallbox (CE)  (Terra AC MID)",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "1.6.5",
        "status": "affected",
        "version": "1.0;0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Terra AC wallbox (CE)  Terra AC Juno CE",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "1.6.5",
        "status": "affected",
        "version": "1.0;0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Terra AC wallbox (CE) Terra AC PTB ",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "1.5.25",
        "status": "affected",
        "version": "1.0;0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Terra AC wallbox (CE) Symbiosis",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "1.2.7",
        "status": "affected",
        "version": "1.0;0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Terra AC wallbox (JP)",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "1.6.5",
        "status": "affected",
        "version": "1.0;0",
        "versionType": "custom"
      }
    ]
  }
]

References

search.abb.com/library/Download.aspx?DocumentID=9AKK108468A1415&LanguageCode=en&DocumentPartId=&Action=Launch

7.1 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

4.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

Related for CVE-2023-0864

nvd1 prion1 cvelist1