Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
Heap-based Buffer Overflow vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (MID/ CE) -Terra AC MID, ABB Terra AC wallbox (MID/ CE) -Terra AC Juno CE, ABB Terra AC wallbox (MID/ CE) -Terra AC PTB, ABB Terra AC wallbox (JP).This issue affects Terra AC wallbox (UL40/80A): through 1.8.32; Terra AC wallbox (UL32A): through 1.8.2; Terra AC wallbox (MID/ CE) -Terra AC MID: through 1.8.32; Terra AC wallbox (MID/ CE) -Terra AC Juno CE: through 1.8.32; Terra AC wallbox (MID/ CE) -Terra AC PTB: through 1.8.21; Terra AC wallbox (JP): through 1.8.2.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-06 | 1 | General1 |
| 2026-05-26 | 1 | Active Exploitation1 |
@almtjrd @grok هذه ثغره CVE-2025-5517 مالها حل ابدا وغير عشوائية يتم الاستهداف اشخاص معينين والطريقه الي قال عنها ممكن تقلل نسبه الخطوره ولا تمنعها
Post summary
The user reports the existence of CVE-2025-5517, notes that it is targeted and there is no fix, and suggests a possible method that could reduce but not eliminate risk.
Attackers exploiting CVE-2025-5517 in ABB Terra AC wallbox chargers can escalate privileges and move laterally across connected charging infrastructure. TRC analysis shows how unencrypted OCPP communications enable network-wide compromise. Runtime segmentation helps contain post-breach lateral movement. #CloudSecurity 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/icsa-26-146-01-cve-2025-5517
Post summary
The text confirms that CVE-2025-5517 is being actively exploited by attackers in ABB Terra AC wallbox chargers, inflicting privilege escalation and lateral spread across charging infrastructure, with unencrypted OCPP traffic identified as a key vulnerability vector.