2023-05-17 08:57:59 +00:00
{
"id" : "CVE-2023-0863" ,
"sourceIdentifier" : "cybersecurity@ch.abb.com" ,
"published" : "2023-05-17T08:15:08.510" ,
2023-05-26 14:00:29 +00:00
"lastModified" : "2023-05-26T12:54:07.163" ,
"vulnStatus" : "Analyzed" ,
2023-05-17 08:57:59 +00:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Improper Authentication vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (CE) (Terra AC MID), ABB Terra AC wallbox (CE) Terra AC Juno CE, ABB Terra AC wallbox (CE) Terra AC PTB, ABB Terra AC wallbox (CE) Symbiosis, ABB Terra AC wallbox (JP).This issue affects Terra AC wallbox (UL40/80A): from 1.0;0 through 1.5.5; Terra AC wallbox (UL32A) : from 1.0;0 through 1.6.5; Terra AC wallbox (CE) (Terra AC MID): from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC Juno CE: from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC PTB : from 1.0;0 through 1.5.25; Terra AC wallbox (CE) Symbiosis: from 1.0;0 through 1.2.7; Terra AC wallbox (JP): from 1.0;0 through 1.6.5.\n\n"
}
] ,
"metrics" : {
"cvssMetricV31" : [
2023-05-26 14:00:29 +00:00
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" ,
"attackVector" : "ADJACENT_NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 8.8 ,
"baseSeverity" : "HIGH"
} ,
"exploitabilityScore" : 2.8 ,
"impactScore" : 5.9
} ,
2023-05-17 08:57:59 +00:00
{
"source" : "cybersecurity@ch.abb.com" ,
"type" : "Secondary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" ,
"attackVector" : "ADJACENT_NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 8.8 ,
"baseSeverity" : "HIGH"
} ,
"exploitabilityScore" : 2.8 ,
"impactScore" : 5.9
}
]
} ,
"weaknesses" : [
2023-05-26 14:00:29 +00:00
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-287"
}
]
} ,
2023-05-17 08:57:59 +00:00
{
"source" : "cybersecurity@ch.abb.com" ,
"type" : "Secondary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-287"
}
]
}
] ,
2023-05-26 14:00:29 +00:00
"configurations" : [
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:abb:terra_ac_wallbox_ul40_firmware:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "1.0.0" ,
"versionEndExcluding" : "1.5.6" ,
"matchCriteriaId" : "B685842D-EA64-4A3F-ABF9-F0F1B8F852B0"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:abb:terra_ac_wallbox_ul40:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "BCC60C7F-468E-491F-9B1F-7F49713E6715"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:abb:terra_ac_wallbox_80a_firmware:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "1.0.0" ,
"versionEndExcluding" : "1.5.6" ,
"matchCriteriaId" : "FD4A0D52-102B-4B87-B62F-E6CF400595FF"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:abb:terra_ac_wallbox_80a:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8A13EE7D-F159-4F32-8ECE-16452ABB84D1"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:abb:terra_ac_wallbox_ul32a_firmware:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "1.0.0" ,
"versionEndExcluding" : "1.6.6" ,
"matchCriteriaId" : "12ABA7C2-C7B9-4A57-8DD0-8C31E01AAFFB"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:abb:terra_ac_wallbox_ul32a:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "87F2647E-594F-4AFE-9F1C-26A64C06BBB7"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:abb:terra_ac_wallbox_jp_firmware:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "1.0.0" ,
"versionEndExcluding" : "1.6.6" ,
"matchCriteriaId" : "C177EB89-AECB-43B4-86C4-395C6E09C2FD"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:abb:terra_ac_wallbox_jp:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "11149871-3406-4120-B1AF-A507D72E3E98"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:abb:terra_ac_wallbox_ce_mid_firmware:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "1.0.0" ,
"versionEndExcluding" : "1.6.6" ,
"matchCriteriaId" : "63F1B597-42D0-4EDF-883B-B91349991A69"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:abb:terra_ac_wallbox_ce_mid:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C1437728-6D9B-4740-B904-BF4B41CD54DB"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:abb:terra_ac_wallbox_ce_juno_firmware:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "1.0.0" ,
"versionEndExcluding" : "1.6.6" ,
"matchCriteriaId" : "A1D1F228-AC66-42A7-88EB-86F7F1C6098B"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:abb:terra_ac_wallbox_ce_juno:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C762F36F-D705-49F7-B8FC-8801F03B6048"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:abb:terra_ac_wallbox_ce_ptb_firmware:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "1.0.0" ,
"versionEndExcluding" : "1.5.26" ,
"matchCriteriaId" : "DAC89B65-BFE1-4BA9-87F4-D2BA0851012E"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:abb:terra_ac_wallbox_ce_ptb:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DF28AFF4-3A99-4523-9DBF-4D7D4401C689"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:abb:terra_ac_wallbox_ce_symbiosis_firmware:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "1.0.0" ,
"versionEndExcluding" : "1.2.8" ,
"matchCriteriaId" : "A6C630D7-5EE5-4E29-863C-72130F562ABB"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:abb:terra_ac_wallbox_ce_symbiosis:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "40F3A4FB-7933-497B-B85D-73724A9ED60A"
}
]
}
]
}
] ,
2023-05-17 08:57:59 +00:00
"references" : [
{
"url" : "https://search.abb.com/library/Download.aspx?DocumentID=9AKK108468A1415&LanguageCode=en&DocumentPartId=&Action=Launch" ,
2023-05-26 14:00:29 +00:00
"source" : "cybersecurity@ch.abb.com" ,
"tags" : [
"Vendor Advisory"
]
2023-05-17 08:57:59 +00:00
}
]
}