SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2023-0864

Cleartext Transmission of Sensitive Information vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (CE) (Terra AC MID), ABB Terra AC wallbox (CE) Terra AC Juno CE, ABB Terra AC wallbox (CE) Terra AC PTB,…

MEDIUM 4.3EPSS 0.16%

Does this matter?

Lower severity and a low EPSS score (0.16%). Track it; it rarely justifies an emergency change on its own.

Description

Cleartext Transmission of Sensitive Information vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (CE) (Terra AC MID), ABB Terra AC wallbox (CE) Terra AC Juno CE, ABB Terra AC wallbox (CE) Terra AC PTB, ABB Terra AC wallbox (CE) Symbiosis, ABB Terra AC wallbox (JP).This issue affects Terra AC wallbox (UL40/80A): from 1.0;0 through 1.5.5; Terra AC wallbox (UL32A) : from 1.0;0 through 1.6.5; Terra AC wallbox (CE) (Terra AC MID): from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC Juno CE: from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC PTB : from 1.0;0 through 1.5.25; Terra AC wallbox (CE) Symbiosis: from 1.0;0 through 1.2.7; Terra AC wallbox (JP): from 1.0;0 through 1.6.5.

CVSS 3.1
4.3 MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.16% probability · 5th percentile
CISA KEV
Not listed
Weakness
CWE-319
Affected
abb/terra ac wallbox ul40 firmware · abb/terra ac wallbox 80a firmware · abb/terra ac wallbox ul32a firmware · abb/terra ac wallbox jp firmware · abb/terra ac wallbox ce mid firmware · abb/terra ac wallbox ce juno firmware · abb/terra ac wallbox ce ptb firmware · abb/terra ac wallbox ce symbiosis firmware
Source
cybersecurity@ch.abb.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.