© 2026 vulntracker.io

CVE-2025-5517

Heap Memory Corruption Vulnerability

MEDIUM

6.8

CVSS Score

Published: October 20, 2025 at 06:27 PM UTC

Updated: October 18, 2026 at 09:10 PM UTC

8 products affected across 1 vendorTerra Ac Wallbox Ce MidTerra Ac Wallbox Jp FirmwareTerra Ac Wallbox Ce Juno

Using Terra AC wallbox (UL40/80A) by ABB?

Get instant alerts when new vulnerabilities affect Terra AC wallbox (UL40/80A) - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.8

Exploit prediction

EPSS 0.3%

SSVC

No known exploit

Description

Heap-based Buffer Overflow vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (MID/ CE) -Terra AC MID, ABB Terra AC wallbox (MID/ CE) -Terra AC Juno CE, ABB Terra AC wallbox (MID/ CE) -Terra AC PTB, ABB Terra AC wallbox (JP).This issue affects Terra AC wallbox (UL40/80A): through 1.8.32; Terra AC wallbox (UL32A): through 1.8.2; Terra AC wallbox (MID/ CE) -Terra AC MID: through 1.8.32; Terra AC wallbox (MID/ CE) -Terra AC Juno CE: through 1.8.32; Terra AC wallbox (MID/ CE) -Terra AC PTB: through 1.8.21; Terra AC wallbox (JP): through 1.8.2.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Terra Ac Wallbox Ce Juno · ABB

90%

0 ≤ v ≤ 1.8.320

Terra Ac Wallbox Ce Mid · ABB

90%

0 ≤ v ≤ 1.8.320

Terra Ac Wallbox Ce Ptb · ABB

90%

0 ≤ v ≤ 1.8.210

Terra Ac Wallbox Jp Firmware · ABB

90%

0 ≤ v ≤ 1.8.20

Terra Ac Wallbox UL32A Firmware · ABB

90%

0 ≤ v ≤ 1.8.20

Terra AC wallbox · ABB

85%

All versions

Terra AC wallbox 80A · ABB

60%

v ≤ 1.8.32

Terra AC wallbox UL40 · ABB

60%

v ≤ 1.8.32

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (1)

Source: cverecord

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A8948&LanguageCode=en&DocumentPartId=PDF&Action=Launch

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

6.8MEDIUMABB

Attack Vector: NETWORK
Complexity: HIGH
Privileges: LOW
User Interaction: NONE
Scope: UNCHANGED
Confidentiality: NONE
Integrity: HIGH
Availability: HIGH

Vector?

Quick Info

StatusDEFERRED

CWE

CWE-122

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card