CVE-2025-5517
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
Heap-based Buffer Overflow vulnerability in ABB Terra AC wallbox (various models) up to specific software versions. This could lead to device crashes or potential code execution.
Risk Assessment
An attacker could exploit the vulnerability to remotely execute code or cause a crash, potentially disrupting electric vehicle charging infrastructure. This may affect the availability and security of charging stations.
Recommendation
Update the charging station software to the latest version available from the vendor (ABB) that fixes the vulnerability. Also monitor for unusual device behavior and restrict network access to the chargers.
Other vulnerabilities in ABB Terra AC wallbox
See all- CVE-2025-12143Medium
A stack-based buffer overflow vulnerability in ABB Terra AC wallbox (up to 1.8.33) may allow an attacker to execute code or cause a crash.
- CVE-2025-12142Medium
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in ABB Terra AC wallbox. This issue affects Terra AC wallbox through 1.8.33.
- CVE-2025-10504Medium
Heap-based Buffer Overflow vulnerability in ABB Terra AC wallbox. This issue affects Terra AC wallbox through version 1.8.33.
Original NVD description (English source)
Heap-based Buffer Overflow vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (MID/ CE) -Terra AC MID, ABB Terra AC wallbox (MID/ CE) -Terra AC Juno CE, ABB Terra AC wallbox (MID/ CE) -Terra AC PTB, ABB Terra AC wallbox (JP).This issue affects Terra AC wallbox (UL40/80A): through 1.8.32; Terra AC wallbox (UL32A): through 1.8.2; Terra AC wallbox (MID/ CE) -Terra AC MID: through 1.8.32; Terra AC wallbox (MID/ CE) -Terra AC Juno CE: through 1.8.32; Terra AC wallbox (MID/ CE) -Terra AC PTB: through 1.8.21; Terra AC wallbox (JP): through 1.8.2.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS