CISA warns of heap overflow flaw in ABB EV charger firmware

The advisory ICSA-26-146-01 issued by CISA covers vulnerabilities in the ABB Terra AC wallbox chargers. An attacker exploiting a heap-based buffer overflow vulnerability could gain control over the affected devices by sending specially crafted messages via unsecured communications. Affected versions include various models of the Terra AC wallbox with specific firmware versions listed as vulnerable.

To mitigate these risks, ABB recommends updating to patched versions and securing communication methods to prevent exploitation. The advisory also includes details on the nature of the vulnerability, its severity (CVSS score of 6.8), and recommended protective practices.