Summary
ABB is aware of vulnerabilities in the product versions listed as affected in the advisory.
An attacker who successfully exploited this vulnerability could cause the pollution of heap memory which potentially takes remote control of the product and performs a write operation to the flash memory to alter the firmware behavior.
Vulnerabilities 1
-
Medium 6.8
Heap Memory Corruption Vulnerability
Heap-based Buffer Overflow vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (MID/ CE) -Terra AC MID, ABB Terra AC wallbox (MID/ CE) -Terra AC Juno CE, ABB Terra AC wallbox (MID/ CE) -Terra AC PTB, ABB Terra …
Revision history
-
#3
Initial CISA Republication of ABB PSIRT 9AKK108471A8948 advisory
-
#2
Final version
-
#1
Initial version.
References
-
ABB CYBERSECURITY ADVISORY - PDF Version
https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A8948&LanguageCode=en&DocumentPartId=PDF&Action=Launch
-
ABB E-mobility, "The home of charging, Terra AC wallbox," [Online]. Available:
https://search.abb.com/library/Download.aspx?DocumentID=9AKK107680A2257&LanguageCode=en&DocumentPartId=&Action=Launch
-
ABB E-mobility, "Installation Manual, Terra AC (BCM.V3Y01.0-EN)," [Online]. Available:
https://search.abb.com/library/Download.aspx?DocumentID=9AKK107680A4972
-
ICS Advisory ICSA-26-146-01 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-26-146-01
-
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b