9AKK108471A8948 — Terra AC wallbox Heap Memory Corruption Vulnerability

Summary

ABB is aware of vulnerabilities in the product versions listed as affected in the advisory.

An attacker who successfully exploited this vulnerability could cause the pollution of heap memory which potentially takes remote control of the product and performs a write operation to the flash memory to alter the firmware behavior.

Vulnerabilities 1

Medium 6.8

CVE-2025-5517

Heap Memory Corruption Vulnerability

Heap-based Buffer Overflow vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (MID/ CE) -Terra AC MID, ABB Terra AC wallbox (MID/ CE) -Terra AC Juno CE, ABB Terra AC wallbox (MID/ CE) -Terra AC PTB, ABB Terra …

ABB Terra AC wallbox (JP) Terra AC wallbox (UL40/80A) Terra AC wallbox (UL32A) ICS / OT

Oct 20, 2025

Revision history

2025-10-21 #2
Final version
2025-10-20 #1
Initial version.

References

ABB CYBERSECURITY ADVISORY - PDF Version
https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A8948&LanguageCode=en&DocumentPartId=PDF&Action=Launch
ABB E-mobility, "The home of charging, Terra AC wallbox," [Online]. Available:
https://search.abb.com/library/Download.aspx?DocumentID=9AKK107680A2257&LanguageCode=en&DocumentPartId=&Action=Launch
ABB E-mobility, "Installation Manual, Terra AC (BCM.V3Y01.0-EN)," [Online]. Available:
https://search.abb.com/library/Download.aspx?DocumentID=9AKK107680A4972