Terra AC wallbox Heap Memory Corruption Vulnerability

An attacker with elevated network access could corrupt the wallbox's memory and rewrite its firmware, allowing unauthorized control over EV charging operations or complete denial of service.

This vulnerability affects EV charging infrastructure operators and facilities (commercial buildings, municipal fleet charging stations, public charging networks) that deploy ABB Terra AC wallboxes. Any facility relying on these devices for EV charging availability should prioritize this update.

An attacker with administrative-level access to the Terra AC wallbox (accessible via local network or remote management interface) could send a crafted input to trigger heap memory corruption. Once heap memory is corrupted, the attacker can gain control of the device and write malicious code to flash memory to persist firmware changes.