CVE-2025-10504 in Terra AC Wallbox
Summary
by MITRE • 09/29/2025
Heap-based Buffer Overflow vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Analysis
by VulDB Data Team • 10/16/2025
The heap-based buffer overflow vulnerability identified as CVE-2025-10504 resides within ABB Terra AC wallbox firmware versions through 1.8.33, representing a critical security flaw that could enable remote code execution and system compromise. This vulnerability originates from improper input validation within the device's memory management routines, specifically affecting heap allocation mechanisms that handle user-supplied data. The flaw manifests when the wallbox processes malformed input through its communication interfaces, leading to unauthorized memory access patterns that can overwrite adjacent heap memory regions. Such vulnerabilities fall under CWE-121 heap-based buffer overflow category, which is classified as a high-risk issue due to its potential for arbitrary code execution and system instability.
The technical implementation of this vulnerability involves the device's failure to properly validate the length of incoming data packets or configuration parameters before copying them into fixed-size heap buffers. When an attacker sends specially crafted data to the wallbox's network interfaces, the device allocates heap memory without sufficient bounds checking, allowing the malicious input to overflow into adjacent memory locations. This memory corruption can potentially overwrite function pointers, return addresses, or other critical control data structures, enabling attackers to redirect execution flow or inject malicious code. The vulnerability is particularly concerning because it affects the device's communication protocols and could be exploited through unauthenticated network access, making it accessible to remote threat actors without requiring physical proximity to the device.
The operational impact of this vulnerability extends beyond simple system crashes or denial of service conditions, as it presents a significant risk to the overall security posture of electric vehicle charging infrastructure. Attackers could potentially gain persistent access to the wallbox, manipulate charging parameters, or use the compromised device as a pivot point for attacking other systems within the same network segment. The vulnerability affects the device's ability to maintain secure communication channels and could enable attackers to modify charging configurations, potentially leading to safety hazards or unauthorized energy consumption. According to ATT&CK framework, this vulnerability maps to T1210 exploiting known vulnerabilities and T1059 command and scripting interpreter, as it allows for remote code execution and system manipulation through well-known exploitation techniques.
Mitigation strategies for this vulnerability should include immediate firmware updates from ABB to address the heap buffer overflow issue, along with network segmentation and access control measures to limit exposure. Organizations should implement network monitoring to detect anomalous traffic patterns that might indicate exploitation attempts, while also conducting regular vulnerability assessments of their charging infrastructure. The recommended remediation approach involves applying the vendor-supplied patches that include proper bounds checking mechanisms and heap memory management improvements. Additionally, network administrators should consider implementing intrusion detection systems that can identify and block malicious traffic patterns associated with this specific vulnerability, while maintaining comprehensive logging of all device communications to facilitate forensic analysis if compromise occurs.