Configuration data is exchanged in plaintext and could be available to a nearby attacker if present during configuration or usage of the device via Bluetooth Low Energy (BLE).

Cleartext Transmission of Sensitive Information vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (CE) (Terra AC MID), ABB Terra AC wallbox (CE) Terra AC Juno CE, ABB Terra AC wallbox (CE) Terra AC PTB, ABB Terra AC wallbox (CE) Symbiosis, ABB Terra AC wallbox (JP).This issue affects Terra AC wallbox (UL40/80A): from 1.0;0 through 1.5.5; Terra AC wallbox (UL32A) : from 1.0;0 through 1.6.5; Terra AC wallbox (CE) (Terra AC MID): from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC Juno CE: from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC PTB : from 1.0;0 through 1.5.25; Terra AC wallbox (CE) Symbiosis: from 1.0;0 through 1.2.7; Terra AC wallbox (JP): from 1.0;0 through 1.6.5.

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

敏感数据的明文传输

ABB Terra AC wallbox 安全漏洞

ABB Terra AC wallbox是ABB公司的卓越的 EV 家用充电器，提供高价值的品质、面向未来的灵活性以及先进的安全和保护。 ABB Terra AC wallbox 存在安全漏洞，该漏洞源于敏感信息以明文形式传输。以下产品及版本受到影响：Terra AC wallbox (UL40/80A) 1.0.0版本至1.5.5版本、Terra AC wallbox (UL32A) 1.0.0版本至1.6.5版本、Terra AC wallbox (CE) (Terra AC MID) 1.0.0版本

N/A

其他