Skip to content
Fencer Vulns
high 7.1

CVE-2023-0864 json

Configuration data is exchanged in plaintext and could be available to a nearby attacker if present during configuration or usage of the device via Bluetooth Low Energy (BLE).

published 2023-05-17 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-12861

cvss
7.1
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 4%
public exploits
0
none known

Summary

Cleartext Transmission of Sensitive Information vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (CE) (Terra AC MID), ABB Terra AC wallbox (CE) Terra AC Juno CE, ABB Terra AC wallbox (CE) Terra AC PTB, ABB Terra AC wallbox (CE) Symbiosis, ABB Terra AC wallbox (JP).This issue affects Terra AC wallbox (UL40/80A): from 1.0;0 through 1.5.5; Terra AC wallbox (UL32A) : from 1.0;0 through 1.6.5; Terra AC wallbox (CE) (Terra AC MID): from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC Juno CE: from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC PTB : from 1.0;0 through 1.5.25; Terra AC wallbox (CE) Symbiosis: from 1.0;0 through 1.2.7; Terra AC wallbox (JP): from 1.0;0 through 1.6.5.

Patch / fix

  • abb terra_ac_wallbox_ul40_firmware 1.5.6
  • abb terra_ac_wallbox_80a_firmware 1.5.6
  • abb terra_ac_wallbox_ul32a_firmware 1.6.6
  • abb terra_ac_wallbox_jp_firmware 1.6.6
  • abb terra_ac_wallbox_ce_mid_firmware 1.6.6
  • abb terra_ac_wallbox_ce_juno_firmware 1.6.6
  • abb terra_ac_wallbox_ce_ptb_firmware 1.5.26
  • abb terra_ac_wallbox_ce_symbiosis_firmware 1.2.8

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
21 mo ago

Exploit prediction

0.16% chance of exploitation in the next 30 days, higher than 4% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 7.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD 3.1 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

  • ABB Terra AC wallbox (UL40/80A)
  • ABB Terra AC wallbox (UL32A)
  • ABB Terra AC wallbox (CE) (Terra AC MID)
  • ABB Terra AC wallbox (CE) Terra AC Juno CE
  • ABB Terra AC wallbox (CE) Terra AC PTB
  • ABB Terra AC wallbox (CE) Symbiosis
  • ABB Terra AC wallbox (JP)

Classification

Weakness
  • CWE-319 Cleartext Transmission of Sensitive Information

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.