CISA Warn of Flaws in ABB Wallbox Allowing Remote Firmware Hijack

The advisory from CISA (ICSA-26-141-05) dated May 21, 2026, addresses vulnerabilities in the ABB Terra AC Wallbox (version <= 1.8.33). Exploitation could lead to remote control of the device by polluting heap memory and altering firmware. Specific vulnerabilities include CVE-2025-10504, CVE-2025-12142, and CVE-2025-12143, each with a CVSS score of 6.1, indicating medium severity. Affected users are urged to update to version 1.8.36 to mitigate these risks. CISA recommends securing control systems by minimizing internet exposure and using firewalls and VPNs.