CVE-2025-10504: ABB Terra AC Wallbox multiple buffer overflows

CVE-2025-10504 · Severity: high · CVSS 6.1 · Published 2026-05-21

ABB Terra AC Wallbox electric vehicle chargers are affected by multiple memory corruption vulnerabilities. An attacker with high-level access and physical proximity could potentially take remote control of the charger and modify its firmware. This could lead to unauthorized changes in charging behavior or permanent damage to the device's flash memory.

Vendors: ABB.

Quick answers

Is CVE-2025-10504 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2025-10504 being exploited in the wild.
How severe is CVE-2025-10504?
High severity, with a CVSS score of 6.1, published 21 May 2026.
Which products and versions are affected?
ABB Terra AC Wallbox (JP) <= 1.8.33, 1.8.36.
Is there a fix for CVE-2025-10504?
A patch was published on 2026-05-21: Firmware version 1.8.36 released to address the vulnerabilities Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2025-10504 attacked?
It is attacked from the adjacent network, in a network appliance.
Am I affected by CVE-2025-10504?
Check whether you run ABB Terra AC Wallbox (JP) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The ABB Terra AC Wallbox (JP) contains multiple memory corruption vulnerabilities, including heap-based buffer overflows (CWE-122), stack-based buffer overflows (CWE-121), and classic buffer overflows (CWE-120). These issues stem from insufficient validation of field lengths in self-defined communication protocols and unexpected lengths in binary files or OCPP keys. An attacker with high privileges and adjacent network access (specifically via Bluetooth) can exploit these flaws to pollute memory. Successful exploitation could allow the attacker to perform write operations to flash memory and alter firmware behavior. The vulnerabilities are addressed in firmware version 1.8.36.

Affected products

  • ABB Terra AC Wallbox (JP) <= 1.8.33, 1.8.36

Identifiers

  • CVE-2025-10504
  • CVE-2025-12142
  • CVE-2025-12143

Timeline

  • 2026-05-21: advisory: CISA published advisory ICSA-26-141-05
  • 2026-05-21: patched: Firmware version 1.8.36 released to address the vulnerabilities

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.