vulnerability
ABB Terra AC
Critical
Summary
This report details a vulnerability in ABB Terra AC wallbox chargers, specifically versions up to 1.8.34. An attacker could exploit unencrypted communication to the Charging Station Management System (CSMS) by sending specially crafted OCPP messages, potentially leading to remote control, firmware alteration, and actions like denial-of-service or code execution. The vulnerability stems from a lack of length restrictions on OCPP fields within the firmware, and ABB recommends immediate updates to mitigate the risk.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data